, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000044}, 0x1) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec01dfff", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 03:04:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, &(0x7f0000000180), 0x80800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x20801, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@in={0x2, 0x0, @dev}, &(0x7f0000000180)=0x80, 0x80000) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000001c0)=0x60, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10001}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x3ff, &(0x7f00000000c0)=0x4) 03:04:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r1, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32], 0x2e8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r5, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r6], 0x2e8}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e80214718ead3fa0094152d875fe002a42fdee0e9e40381b5bc220c8e931461e753de6a3d08a5c0c64935c11c6480d4d35c5", @ANYRES16=r9, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r10], 0x2e8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000004c0)={0x6e4, 0x0, 0x120, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x587a}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3a2c}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfffffeff}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0xb9, 0x2b, 0xff, 0x4}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x376}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xc81}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8, 0x1, r11}, {0x188, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x6, 0x1, 0x8, 0x1}, {0x5, 0x1, 0x4, 0xffffff50}, {0x1, 0x16, 0xa9, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xdf3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000001) pselect6(0x40, &(0x7f0000000000)={0x0, 0x1}, 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0x1}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f, 0x1}) 03:04:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, &(0x7f0000000180), 0x80800) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x54401, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x4, 0x2b}) timer_create(0x2, &(0x7f0000000040)={0x0, 0x3, 0x3}, &(0x7f0000000080)=0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000140)={0x9b50, 0x200, "c72bd3273ad5f0f4f9df92d1e062172cca1f27c6064e48e115c9ddb57d27b59814e14e50b3567641dd4d2c821db9544e5a0306c4b03910e459815c2824bc79aa5c88e31c20a1990da0f29efe1c6e9c56ec0341e80f4ced3f5859d94cb99a976503"}, 0x69, 0x1, 0x0, 0x0) timer_gettime(r1, &(0x7f00000000c0)) 03:04:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000)) 03:04:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:09 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0xffff, 0x9, 0x9c, 0x0, 0x0, 0x955a, 0x4, 0x6}, &(0x7f0000000080)={0x1, 0x6, 0xfffffffffffffe01, 0xa0e, 0x5, 0x2, 0x811b, 0x1}, &(0x7f00000000c0)={0x5, 0x5, 0x5, 0x1, 0x0, 0x49d7bc4f, 0x1ff, 0x1}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) pselect6(0x40, &(0x7f0000000240)={0xc019, 0x8000, 0x9, 0xffff, 0xfff, 0x8, 0x5, 0xe7c}, &(0x7f0000000280)={0xffff, 0x100000001, 0x7, 0xa06, 0x4, 0x9, 0x7, 0x8}, &(0x7f00000002c0)={0xea0, 0x1, 0x800, 0x9a00, 0xfffffffffffffff7, 0x5, 0xffffffffffffff77, 0x7fffffff}, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x6]}, 0x8}) 03:04:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x8}}, 0x20) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, &(0x7f0000000180), 0x80800) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x1) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f00000000c0)="60d2aa950f5ddb0e839cdc1bae7f3539eb6344d74df992a60f25ee7fedd92d33fdd134b251746f8a51dae193fd242974f979af0ed4a36507b0bfc374e354c3a005d5a9e7d68dcc055ade4fd680e16b803f60f3576a81b3bacee62304cd1999b12df5a15eaec2b005df8d78ce8b5f923eeb0234928b", 0x75) 03:04:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) inotify_init1(0x800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d6d656d6f7279202b6d656d6f7279202b696f206ff54e813c35d7d7d24ed584d2f57393369843d605cf58d8daeb0aaf182523d86360e2b402c37a3d6e179a9f5fb8a50d90a5a3b3a6"], 0x14) 03:04:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:09 executing program 1: ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000040)={0x101, 0x9, 0xeec3, 0x7, 0x5, 0x10001, 0x6}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f00000000c0)=0x401) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r3, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r4], 0x2e8}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x0, 0x10001, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, 0x10, 0x80, 0x1, 0x3f}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1e0, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000080), 0x2) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000004a40)=ANY=[@ANYBLOB="238a1712dc013337488c7c69d2e1ca0a481c", @ANYRES16=0x0, @ANYBLOB="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"], 0x2300}, 0x1, 0x0, 0x0, 0x20000800}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00'}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x70, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, [], 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x881}, 0x44000) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:09 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x220000, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x40000000fd, 0x23}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x400) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x101, &(0x7f00000000c0)=0x4) 03:04:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, &(0x7f0000000180), 0x80800) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x101000, 0x0) 03:04:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x40, &(0x7f0000000100)=0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 03:04:09 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000540)='1000000\x00', 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x364, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "086d9da327783baff59817d8ff2a596ab5128f9e714c"}}, @TIPC_NLA_NODE_ID={0x84, 0x3, "9a07189a69d5f16d18f4435f72a67e9c017b73ffa0246e62f9bfa3d274d5842bb399c0fcb258644ea57c73b5ed671e3b78901934364aace458f807985810b19f4f4d0d018aca629abe76092882b8c588c2cacefb08b1a06d05fcd2eb96ae969e92003c93d7993b21e097822daeeaba2a700a01d0d9b11be5fd55a4fc1530e388"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0xb8, 0x3, "ab9589cb0031a3e8b77b2b565454d27942011fc8cfec3a8c599fd375a7a0aede4692feb8721cecec40e83861dbcaf3caf380b83e5634f709317ee4828c48a283c97d1815e586b5a419f4495c968b0b542ddacf37c7e7af387eaa81216aa9efc77e6c01b32a9a996bb23e5f48efc8fd31fe125bc8b7a5130087ee76fa002ac7e0de050305737499a15c2430abc4b9c1717c67455314be46f14b1d0a9ee2f7e70675fd1975ec5d16c7efb0a413df0270c9080b4c13"}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4a5}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe9, 0x3, "b4a2abd336e47eed73482ab8bef1e8bf367e8efa57ab99504d79bfa40b20a14ed7aa129fe34df6449a6fbea31eb865ce9c0c8e2c702351d61a118d8de3cdee88689ff88695c71aa864c5e094424470e90dc3f93c4a13a66c0eb372a93919044edaa480dbde701d5970beb7f95b3849b7f92a87c825336c4318ecc17a239f16e8b213e7106f0a150d5657745e13e277eb821231017dd9c934c2bfac08025846e552124dc0b1616d6a86cdff36facfe730ce67cf877bfc8814906f991dae830bd120a5b5e8e132c5eafab9d1172656011e02453981bb0c5191b78e27ed1ed1c93a53d3048a7b"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "cb14b0c6db1978249b31a46870636aad976a6f49d7ea1d08eabe0477bc8d7acab081"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "7bbf5fdfd94e5c83e9fcca552835798b31d27b27"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x10}, 0x8800) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00', r1) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0x40004) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x240000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x4, 0x20, 0x1}) 03:04:09 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x220000, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x40000000fd, 0x23}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x400) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x101, &(0x7f00000000c0)=0x4) 03:04:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 03:04:09 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x220000, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x40000000fd, 0x23}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x400) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x101, &(0x7f00000000c0)=0x4) 03:04:09 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x65a000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0xd}) 03:04:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f2, 0x8, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x26008080}, 0x20004000) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x3367, 0x20, 0x4, 0x20, 0x3f}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8e5f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "0196acf40397f8b8b622f2be7e1f553713578620b4"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc5}, 0x8004) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 4: timer_delete(0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x32c}}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0xc0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) syz_open_dev$rtc(&(0x7f00000004c0)='/dev/rtc#\x00', 0x8000, 0x80) 03:04:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80, 0x80000) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000300)) sendmsg$AUDIT_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x3e9, 0x100, 0x70bd2d, 0x25dfdbfe, {0x38, 0x0, 0x2, r2, 0x1f, 0x7, 0x401, 0x10001, 0x0, 0x3c51}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) 03:04:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000326bd7000fcdbdf250b0000002400098008000100420000000800020005000010080001000900000008000200040000000c000380080003000100000024000580080001007564700008000100657468000700010069620000080c00068008000100ff010000"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 4: pselect6(0x40, &(0x7f0000000000)={0x4, 0x80000000, 0x2, 0x2, 0x72f, 0x4, 0x6ea480000000, 0x8}, &(0x7f00000000c0)={0xff, 0x8, 0x7fff, 0x2, 0xffffffffffffffe0, 0x63, 0x66, 0x78fa}, &(0x7f0000000100)={0xfff, 0x81, 0x8000, 0x7e, 0x800, 0xe7e, 0x7, 0xb25c}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x401]}, 0x8}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x2000) socketpair(0x0, 0x4, 0x3, &(0x7f0000000c40)={0xffffffffffffffff}) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000c80)=0x3, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x1ff, 0x2f}) 03:04:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x6, 0xffffffffffffffff, 0x1}) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1a4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x13e}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1a}]}, @TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) clock_gettime(0x4, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) inotify_rm_watch(0xffffffffffffffff, 0x0) 03:04:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000326bd7000fcdbdf250b0000002400098008000100420000000800020005000010080001000900000008000200040000000c000380080003000100000024000580080001007564700008000100657468000700010069620000080c00068008000100ff010000"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 4: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x8, 0x70bd25, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xb34836fc14a924e0}, 0x4084091) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x800, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x14, 0x871485c8ed399ab6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x2b, 0x0, "79f0a9ed766a1b15fd71c765e5db81781721b08ce31e4c3f64b3772385fe1ae8825ecebd2f6a7f06e60932a1595fe9eb0255c9c5d719e21ac1bee9c3c923add72e49b17f7635b5153d12fd696da2637c"}, 0xd8) getrusage(0xffffffffffffffff, &(0x7f0000000100)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:09 executing program 2: ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x21, 0x1d, 0x0, 0x12, 0x0, 0x1000, 0x0, 0x7b, 0xffffffffffffffff}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x7fffffff, 0x18, 0x1}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x7fff, 0x2, 0x4, 0x1e3410, 0xadb, {0x77359400}, {0x5, 0xc, 0x1c, 0x0, 0x0, 0xcd, "60be8e7b"}, 0x64d0, 0x2, @planes=&(0x7f0000000080)={0x3, 0xffffff80, @mem_offset=0x6, 0xe419}, 0x0, 0x0, r1}) 03:04:09 executing program 4: ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f00000000c0)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x313080, 0x0) 03:04:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xf0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x53f2634}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xaa1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x401}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x2}, 0x20008001) socket$isdn(0x22, 0x3, 0x23) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:09 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, &(0x7f0000000040)=@isdn, &(0x7f00000000c0)=0x80, 0x80000) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x44851}, 0x40000) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) 03:04:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xd}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8a402, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x5, 0x6, 0x1}) 03:04:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000100)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:09 executing program 4: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98000000dcaf67a19785cd85ac34fce1488b00"/28, @ANYRES16=0x0, @ANYBLOB="000108000000fcdbdf25080000002c0004801300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00001400098008000200090000000800020000000000440006803f00040067636d2861657329000000000000000000000000000000000000000000000000170000008d74de35b3b92db19a7ce05e1e1888c56d0c6258f13d0b00"], 0x98}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080), 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) 03:04:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x4a00, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0)=0x3d, &(0x7f0000000100)=0x1) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00', 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x204600, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:09 executing program 1 (fault-call:3 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x8201, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 03:04:09 executing program 0: getsockname(0xffffffffffffffff, &(0x7f0000000300)=@caif=@dgm, &(0x7f0000000280)=0x80) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x77) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x1000, &(0x7f00000000c0)=0x2) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000100)={0x4004, 0x1f96, 0x4, 0x4}) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000140)=0x8, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x3e9, 0x20, 0x70bd27, 0x25dfdbfd, {0x48, 0x1, 0x0, 0x0, 0x1, 0x4af, 0x6, 0x0, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x10000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x18, 0xff, &(0x7f0000000080)=0x8000}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x400800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x8, 0x5}) 03:04:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x6) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:09 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x33c, r0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x1a}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6e, 0x3, "4fa972dde98e98e5ef6d44ee50222613bebc51d444715223b96240fbb6bf60dc7bcb9c81b3c34c403ea535100755a565b2a217b02fe19f111a5326c329e930e07a9f158507db36770d0004b6e49ae5f0b0ba80208f9cf3913efff212b65386a5ce385e1745f14f7ca885"}, @TIPC_NLA_NODE_ID={0xc1, 0x3, "3c4544c15228b341efb68ddc939c6156b46be9258b4508a2148cf3be5b5f10e922578ea80732313d7eafb3fe0e0cfe8260db9574e9a15c8059dc07d80920893ddfe0de5fdcc3659249df7f659a6c45d48dcbc10a1128b68113dd3bcd70cd4802ff547052bdcba669c59806a36356d2daf6cf73e60cb7d0fd353964a6ebf5fc126ebfece6853737a1949e2a1f1ac8bcb69c28c1fece6a21b55593be129c90157afe3f877af24e302277f5a9d9ef7230c5da0dd1fb66ba3ec4e11f84ea8b"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "ab5b317867ac86c623e806cfd580952e89fa596f2171b010dfad48d769945e"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4fbe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4080}, 0x10004000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x2f, 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84d2e90c8b1d0a7a}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="080027bd7000fddbdf2513000000340004801300010062726f6164636173742d6c696e6b00001c0007800800010001000000080003004600000008000300ff0300006c00058014000280080001001d0000000800040001000000080001007564700034000280080003000600000008000400eec9000008000400fefff7ff080003000200000008000300ff0700000800020009000000080001006574680007000100696200000800010065746800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000050}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00', r2) 03:04:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:09 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0xdd17aae23ffe37e8) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000140), 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x20, 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000003, 0x2f}) 03:04:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) socketpair(0x21, 0x4, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00', r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x40400c0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240), 0x8) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x84, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfb6a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4044010}, 0x1) 03:04:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x10160) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socketpair(0x1, 0x2, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r6, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r7], 0x2e8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x17c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x221}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x4fc, 0xa2, 0x9}, {0x8, 0x4, 0x9, 0xffffffff}, {0x3, 0x90, 0x1a, 0x363}]}}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x5001}, 0x400c840) 03:04:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004450}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x100, 0x70bd29, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x81) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x40000000fd, 0x14, 0x0, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x40, r2, &(0x7f0000000280)="b84ea0a9b4741fe36fa61eff571f2efa6c3d251c79cf16ab3d5fc6cdf6f529d415dc931c51992caa2b3436383471b1c10be240608b2fbb6b98c4af8de45433400b5b4c245d2f2ce7b137391e130d7640882d9ecfcf866092383cfe68f2744aebc041ae850c73edbdb74ccd8a3b562441cf43dbbba6b7cf2d24a9e41f50db941ddd1067107707e27411b2d987bcbb89b93d476e085422a9324c3184c41bcf7819a70bfbe6bfa8145d7f3fdc3af6a8dfc1b251d082d266", 0xb6, 0xff}, &(0x7f0000000340)) r3 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x2, 0xc}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000c}, 0x4044040) 03:04:10 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x27c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @empty, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x56}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8ed5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x76, 0x3, "a8b2533d7588060f5637347a39f015d7a4fbbb77ab7a2564f5357d802df43ec7d93e71570ef7ccff6f28a2ea5f6560bb8e1ab1b40d0c6fcd2682653b862cb626424aac7827f5d78031aa2d2e13f78272e23c21b45d8233c067e73a19b37e0bb100466e08b8eafd838308119716f76e64d3f0"}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0xff}}}}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x43900}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe143}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf877}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3759}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x37}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffa0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) 03:04:10 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x8, 0x1, 0x2466}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x1f, 0x9, 0x5, @remote, @private2, 0x10, 0x40, 0x2, 0x5}}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) socketpair(0x2a, 0x6, 0xbb52, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00', r2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x204c1, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x9aea4a4e78e088bd) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x218, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x62}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf641}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c180000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3e}, @TIPC_NLA_PROP_MTU={0xfffffebf, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee9c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe00}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb7e7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffb3}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6c4fbc99}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff7fd}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20008885}, 0x8001) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:10 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x1, 0x12, 0x1}) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x1454, r1, &(0x7f0000000280)="96341fa557c3cccef71189e7b0840cf1d29087c3691d83c7458d49d6c3048d7d144c5c52e6596525275a7cbe83b0eed18088cfcbdfe91b5bc8ab25f7688f4d3db0fb55a90924ec488273f950b27f5bbbc413df32db142f9bf55d8fe5c1f2f71f379357053dad7b55c7a589ec372bc0db475befac13d094f93f2d42d788c0d111f5b226e0894ff1570ce4470c5c7cd8619b29e131bd268b802944043e6ef514fb356b84c829d8e4030cd40ca0d120ed3a1ed3eb3997d2dc723222f5015e88a07a56c8cafe4b3a78414609ade9d174010bf316b71919b80c1c7b229b5838470c8dd81557184b9b06a4e7d523cea13c5677a6e6428fd3ed291cac86680f4210a12021bb90708eee661eca2d088bb9f581319c6b7f1b3b51219c2dd0f8f945b87df92584945d5862b9da7e0ac5bab7f51eb2bd8cb3bc661bd8eca7eaca6dc9ba4f3ee4206ab91a6e8dadfc0e56fc0b937a6f27ad56df6c6c667f0704742ffac3e6d58dbd46d3c0e512e1ddb99654034354acaa796c49a411ad809a5c75c589db907ec8cc46d0b1291eb314d68c01f3eaf52457815c311d73314f26c9778f2d67a7a3379bcf36c0da16e6b154f3e175ee011f8d06a82cda922ca70fe0b16757e8c64f5fa023d38a2c12f5ebe6428b0afd35ed5a08f7de649066d211d81b6988aaf578d286407aceabf6bc987e2d3af08ab24652f188f6d0cbe4fe15204406e668befd02758f7aeac69086d2b7b7b96c9e1478969ba67415efc0fe99ce382f06788d1b4f40ef09802cae9862e3921d2d05c52309dea79191ce059301dd64c7ecbe3e1209270f2f5911640a88ccc06af854a00c8cfa6e11850bccc6ccc626c848273111a34753aea3393a5e9190ec25b407b5b9651580b0f044ad586e2790595890c069f906cc53a20936d5da171bf87678ad1106979825b9cd85e75e3acdf4914027a520ad2b655509bcb4c22019290f88236bb716cdab4aef750b43413ab4d36c0d39b3e50be6d955e8f44c99cce99218c30eab4e4c36a41f2551222ebdcb4cdc0e2b9f81e9802d56e872b759e478e6610b91a2b3b7fea15a2c20009dbc9c2f0485e8b1d7b9b2ceb4cef1d221c11526d3a2dcd1eeaf264dc738c2a8c8b816410c196b416199f1ae8d30060747b709a308848032065a09c28d482abbfd3cca6539939e3960f7f22d9772ed6825ac05044335e5f94bb6e21c822d1090f1dc037a9975c2c71c6bfc00eb2996f4d551dfbeca58ce7c23628e00c4d5682e8a8a32de3100da3dfa72d813aa1e2c6334e1484f76437ef6acc3326f7af5ddbfa584e4b2c5b691317151b394467b81f5b536d9870caf4f53768d98d2bc88c3b9375014edf55db129fdea8e915dd153c4d9953df82819b8b2202eaff787d58250c25f55c422968bdbf11efd60c2d23a27af30b1b5420066acfbb206f45fa50f3c2fe811df8e04432c71ea77d8b740de74f37e328a312412ee5a039345fb5cded1848919feed23017cf5c239535fbc24a9eb53c31376fa7374393ffe82156042df23b13fb498805606738128b5b84ae1a9e9372c541880e68fc157c7bd1196880dad2b926ec240385b88c6a1a9ac0900c747aa48a18f110b5d6e9181ebc1eac3642c0458584be6a80e6c2de3baae5d374cc0a7b738a4540ab9e58b03a7193d2009c8fbce068d894ca505db1d43d3857da97f0f7c3853d2428ca083d6be600c47471b7d7f00b91d5397a62530d10d1a1954a65d041ca3aec3c6a9aedad23eb63f7b5533eeceb99212bf7e73d1b92d5cb09a6bbad5ce71339d237417d8cbe5a93075f5a4c1f1dde72114d861080fb113682f5558f79a02fabc5afa1d34674ec3841fafa8529e986ad7f8fa41dde82defa9779d6d1b32c2fbcf50c82c665978b1df5367b69f9f22a199f45db96d546a88179bc39b97a1c02a2209bd712283e1d84a7f65856730d90032bd4874257c8b0269aacfc35166119e12270aaf1368e26fb1c8805dec55bafb536cf75f3f0f1cc7f10b1c36a860dccb18af6875ef7103d91935888b0cf0cb428d6ab1d7b89b1a06a645b6ce00113c7382985ce8f8a071e3166f86838a15ad159a5ff79d83c2e8f7011d99fb3b4a58879a77fa3525f5a67649a3ded83c351d7decbd3982c185f16a1a745d9d8265113788bf83b1e24cae0a1b551e506d9b8403650f7427ab1f46679fe5acce2ccda12c3b97a17033c49875cca07f6a46ecf8b423b94488ae9238a2885eb4eca17bb7501df726aa3965beb0406bd6f3323ec84ed7c06fc68d292bb3d98e83186ce1a0884e95a763aeccf979c44683d57b26a6035694f3344adac4bf4d3efd98109954ecef8dc1dcb921d86ad3ed33e8c13f89131b08e94402732507189d1b4371634f2e6f8cacf5e2556f5fa714bc5cea40e132d18b30902ba8bbe482026db5df2470b1d24fc27995ca32a2145370483cc25274ce0b5efe92a5a971ab5d19ce241927b97308f0788944acac5c2d22f2538730009507a4deefd452dec30a4b9510e08a2737d1493d29dbc31274e2702ba310ef5edd8e9ba0f5b5d12cb49b659b88c16dc78f06924be50c2c8eafbb632bcee5ebf5c4e2bdd24241dfb1c973fe8386e99bbc7acd681f5bed49781edd92a3bb5a0dca109c6bf76367c16f4aab26acc1a47266714bd8479172d25c28ce32440a49c9c19d27f6af7260e061a91a9f7a6f7d20625d51b1289c999d48defce75036a8032ce4e9ce9fc5e61082e1715b4f1a833b5863e4354f9d7b24045b7f53bae39305e922cc451a494ddd86fa6ab054fdab6b033b8ffc53140c800663e888d4e5b925a36e1bc3e8f521cc9b4ce316c2ae4e61659cd8ba726775145b392bbb0523df157a266a683087a60c9eb77864ca53305248b0fd7d934ff2ad6b134c955786dc231892e8a901d944e169572ab0703de08371f63a7693416799e79b3a1eefb036d7082786a3160ece032dab48b69f75276d866cbe17e2c7e9b72855a84c3ab9a467887ab3502aa44c5864ed7b7a1508cc919589934d4d431272ddc469fc944746a7d875e6728366d7da7242d59c5f12ac7604593e982a740ad5ad022985e6676831441ca2da60bbd53b25a693e988cbeef821240b940804839750edb7648e8ee3d11219d3aac278c82efd93de98c09c831c547eca2ff4e743c7a2cc7d402b7aa3aec2972fc4462ed8ccce446180986d3aa6143030f77d09ce8ba0897fcbd80237617c6d851cbde58d7c2df8546f2c69720d8406d25f4b85f705b3b374d44e0b346224d4e18ea83b0ad7306e8001757cf78df56854613ecb0be6f5bdc873ed329054527d55380939ead84445b5094309d8ef4a1117ff2d5abb7a5f5acd3b0a26a527038d119c06b61ac77b33a03e5d1b44cb9f5ac3f07a05675ecc465da61d25f72a6f2325344303153f26782a048455b50d36de0731588f9265892da5006b44fea13ae71611da6c54bc9f2000ad0bd00324ac1184c1354d044e59023836a4e2d8b908bd8f02f76fc5f2e1fc146326320049425ef11b3c354b2457ccc623a20a6544b97b7579a254c7a570bc6cf8b0a99b050c13485760dfcb21abca2cb2b74071678bfefecfbc641a506c11e5cee65b3d90c560a3d5b9380a91d7ad4c0f53c06e5b30504ceca998627dff1e63c9d2fa76379eb4d034a3b4bc103b19f655e72ea29afc102c3c575f98a633d8d48b213b94f5f12a38c7a07e4d46117001bb2c221e5315b4794887d3675932d8be978e3a78eed8010aa5ebf96485dbc7c8f8c4393f5c5e8803c5c9bee6d1b6f7f7cde4fda96921a99ab975aa9dfcdb619719b5bb2dbd34bd821d402692c010d1e3447692b2840ef8fef8d8c3237c12476c3a66af378b9e5f62ae6682a5683bd47c4d3f71746e429c0bdd4509e1a2b74af8a8ab6cd9d9be28d17581130fbd662c6825354e806a9df8139feead2a75a79a42526018dbdf21aeeda912351bf0c73eb3b47da639938c969207d340fb6a3e2476735cc92c50a9980b654e82670725b6450dabd6dcc2dafa8041d4ec5f054a7d5f8e4475a838cfcd7817637b818a559d9a8ec321d5b6ca2c08a94625ea3830b3a4ac8e599d10637647f5ad2dfb7b3f66e02e249f30a259e813c4cd7ed81b0da7ac0da2c39c9dc2b990b3e1f6d195f45cc83d75bbc634c4b2e94191d5a4dc8f7f6ae4007452fbe676e2a3f26083e142906adb238dab77ce4cbdaf78fba1f21ade0ded6a1cbab5121f9505aff28b9fb0b285c956aa7bd7e66150dcb4cee072af987b9a73369be49168d04fe15a49081be14f7dfe607910b8c65a2904147999eb0c2dd46a34f0bb51b309ee0b4269c996a7474d22633c87f1a67023f6178375f300755897565f42501c9889769932dc6752879ca55d136fae9bb3479a9aa7bed4ebd9e717111b953d4f7423969b91d0c2b6760f38df7bb54c1825d9f72e9c2c55815052cf358960b5c9fbc40d6075564a15828b08cbea6271064c012db7bed2288b7633ee92fb60f3a6d5bc5c30fbd83a71707e0718fb3b5193ee33679d060dafeab2b06c1756c345f0ef41a12a7cd8b5640b8c1f946a43261f3d822140a69552444c97fe41e0c12b48944483e055d4cad9759c27e30a92b61dc480fe1478666678ab4a039507d95fe9271a9a9a9f9769a66660981d9fbc8d2c2145fa7e57246ab3fb04392b1eaecd3be49a5097d48a6bcf50a3661cb8feb44face1b12fbf7c1102e2aefd5aefdae75354d6a59c80bf4a6f4eb4c90cc4a2de5cfade93583cea2760fb32087e37d2987f10355baa580deb3d110f36977bb88d51ee62d0c011386a0409d62713be9c633ac1380e131f646b0936cdf808c815f647d0cf0408cbb47ac088de55351c94fb7c6c9a8394bfe4896d98210acb54d55a74e8a9a9bc3546559900b4f4b051ca09caab51afe9285caa497975d241ce20f04d9935668b62ac8b5a1099e5bda5cdba6d14ebaf1cbbe6fb327271362ee43aa93f0d61c35bfb637b77e7185fc481cd4b46d0a677d0a96dc32fb62106cacacb8c482bb8ef3f772e16d38a67d4eb1886336fcf14a67d609ab5d58f1e92e4a2edfa8aea5d96f28aef6878bdbac020d1cb1e49545bd43cce6f2f97cc38587931d53c382f08a4860e2f57c50ac2eb65f1560aaeacdb39dd6058cc77def993828eef98f2a9154ad443431918117b432652cd6c963ffaa43a89a7e0b1522b39639ab042d45db85092881265e161ce24574a19328fd1466837e53206025d2d3c68a4ca2fafc406342a5393cf6255b03325609224ce977e453a8cf7fdcba838946f669ee22ea3a37f4c157edefa9b48aa5ba283e9ec12a795dce2adc10de51964d01f17d4066e42a26eefe37172666103318fd8e17ffb6a92be3435d4ecf6ef315affd261397938447ddd585775df22395c8d10bc7c8acce26c172c922160aafc3e2f3ea571f2f0544d12b3de026c8d6072a5ce368fcf6e3decc654c9de14e59ecbb288e8e3ca536f4da335e7dae1cfce5f5390be6352caa3441d77d5be26a3df8b227e822bf4a65a9102ca0bc77b1725b2315c2a7d8df9ac1f5fae126abc7798fc24061c1878f02a63b69baac25f5085293e820397ab0354d052d282b3952bdbe9f928762c6e659ea5220d93013565ac733a3c4a40e51fb18c383fd0e1728b47afddeee31331683e5673f7fb06a2d04b530ccad8a467b2b69fb0818715c89351737198cbbabb17b060905d6d4aec3a4e80641b9340a1f1d7625278510a94702c5807ea4cc928a426c7058aced4a1eaa08225089c0c8a29216cda87a2d1ebb164077c7d5e56b2f1574518a286a3ba4667a10ce9acba", 0x1000, 0x80, 0x0, 0x3, r2}, &(0x7f00000000c0)) 03:04:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2b, 0x0, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x131}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9810}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x7) 03:04:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x34bd01d1576f0eb1, 0x800, 0x100, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x2, 0x8, 0x0, @remote, @private1={0xfc, 0x1, [], 0x1}, 0x7, 0x80, 0x10001, 0x6}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r8, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r9], 0x2e8}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r12, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r13], 0x2e8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000440)={0x4f0, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xda}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xd288}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x4f0}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x847ef5f2b82cb14f) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x141042) 03:04:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x8080, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x42, 0x2) 03:04:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x2ef48dbf5e623766, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:10 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8c3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40044}, 0x20008001) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) clock_gettime(0x2, &(0x7f0000000000)) 03:04:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x6, 0xffffffffffffffff, 0x1}) syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x7f, 0x2) 03:04:10 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/25, 0x19}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/128, 0x80}, {0xfffffffffffffffe}], 0x5, &(0x7f00000013c0)=""/219, 0xdb}, 0x400000a2) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000001500)=0xffff, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000001540)={0x4}, 0x2) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x2) 03:04:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:10 executing program 3: ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0x4, 0x0, 0x30b}) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffffc}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000140)={0x77359400}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9, 0xbdd, 0x81, 0x8, 0x3, 0x100000001, 0x3}, &(0x7f0000000180)={0x3f, 0x9bb7, 0x81, 0x7fffffff, 0x1, 0x8, 0x0, 0x466d}, &(0x7f00000001c0)={0x101, 0x9, 0x4ba, 0x4, 0x2, 0x5, 0x8, 0xffff}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000280)={&(0x7f0000000240)={[0x8000]}, 0x8}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00', r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1bc, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "0cd8dfd933a245dc1f315716741bab417549e0d2629e7171a1f7"}}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6d634fbd}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x274}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3cac}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x666}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "cde0dd3daf2f736a67a06474ae5ec6dcd858b6ed"}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) 03:04:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x4080, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x3) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000100)={0xf689, 0x3, 0x4, 0x40, 0x80, {0x77359400}, {0x4, 0x0, 0x9, 0x8, 0x40, 0xf8, "cf132fff"}, 0x8, 0x3, @userptr=0x38a92cea, 0x400}) 03:04:10 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 03:04:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040), 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x304, r1, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff0001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe08}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x1a0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x621}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8ea}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0xf}) 03:04:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x705}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9000000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x429}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xad}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x53}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)={0x104, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xba}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x1e21dc10ee71bbc6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3ff740d3ae355b00000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2b0, r5, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb64}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2118}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x739}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x19, 0x3, "44936cae288aba03052760a9947a68562738ddd036"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "a17949a28a2daa123c48f91e1229b0237508476a65f79bd7757592a610"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x1, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xfffffffffffffff7, 0x10, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000140)) 03:04:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x80, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4) 03:04:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000480)=0x4, &(0x7f00000004c0)=0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00', r1) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000500)=0x20, &(0x7f0000000540)=0x4) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x224, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x77}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xed3}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7f, @private1={0xfc, 0x1, [], 0x1}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @empty, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe8d}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4080}, 0x81) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x6, 0x2e, 0x1}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x400, &(0x7f0000000440)=0x4) 03:04:10 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00', r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x2) 03:04:10 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x80) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40000, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:10 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x7}, 0x0, &(0x7f0000000100)={0x3f, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbff}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x20, 0x4, 0x6, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fddbdf25050000000c00040001800000000000000c00080005000000000000000c00060002000000000000000c00060002000000000000000c00030005000000000000002400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00020003ca9c5d820825df15ac0508000000000008000100"/43], 0x94}}, 0x20004881) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x103, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:10 executing program 3: clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000280)=[{}], &(0x7f0000000300)={r0, r1+10000000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xdc, 0x0, 0x601, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9ce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10000}, 0x24008013) 03:04:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'memory'}, {0x2d, 'pids'}, {0x2b, 'memory'}, {0x2b, 'io'}]}, 0x1a) 03:04:10 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x80200, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0xa8, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6f9}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf7}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xae9}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24044080}, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f00000001c0)={0x1760, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x11d0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xec, 0x3, "707a861bff7adfee359d1caec7ce388829f051caad56ed8c65f6fee3a5c43dde417300207e5828921f6735e2f990d954da4e4334becd557c25dcf3e7a849db91cbe9cd56ccf274556db622e546ca210417cbea3672634ceb962326b48b8e5c59d1a0f9b177b8e0e928dfef53b69f97ed80b6c5c1d1fe0c69003e3e71f69d58c10a23c89fe3a22c297939deaa96f68721cdb764a44480b89523e9e9aec23f3a111fe28bca0c4b557fd1a625ba8fe47963438b42768fe07c9baaea3d0c77782df3cdc19b168085828546daed7cdaba545b6ecac2e1b63fb8472f2f5f6113e33d606d9ac2126bca0993"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "1a4e6193ed9c82277e5c1b236d9357dd1b3d63c8b55984ab"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x99}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "eba8498da115e7dbeb3e852aa8ccb1e58c40688b47dbb730f116c81f1beb6bb43ab61886"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "7e3cee4bbe89b028cfe5f568516fa7ea07c8f52ef7a324"}}]}, @TIPC_NLA_BEARER={0x194, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x800}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @private1, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x800, @private2, 0xd}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6000000, @loopback, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @empty, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x813c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x68606154}]}, @TIPC_NLA_NODE={0x30c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4640}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ID={0xfc, 0x3, "d46261f0fa5887ae9b6875dc526c2bfb1bdd349bf28adb25de9abfacee27fbede8eca0c5184d26688adb1d690ae3ed8a382b09ea4d6a0f65bcdeebe5e23f48f2d533287a8bb64bde7dd482467f48b01e5791234f75fcab5ed13ffc40826b04b3ee6a735e31684b54cf5a4fd47a4fcc7f53295be5b4d01c7d2e0d072bd289394cb984a882374349c228d1e12950b841b0c6a718e10470ccdb831db91ad8a7e4402081c9578f9f35e325d2685bd0ef4915a62e9e2c2099cb18518484510ad635e181cd6f49e97b241dccdf5dfbb377bf7873fb2127edfea64c3b044863566d9a0ead885863bbff41159c08236601afaba0697de47de8feba11"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "86a2672201c4e85ff23d9fbb62b5f8178beb30b42d140a9bf3bbc95ff34203eb"}}, @TIPC_NLA_NODE_ID={0x31, 0x3, "270f6d67462f1a1aef36a72e2913c75c212fdff3ba0ad404ce8480dec812cce6e132c9c8c7d4061ec692983a29"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "82a4ba744f36cc044966342d350dd20e6cfe5a9a89376ddca4a966cb6f1fa0fef7c648966828433b93c7c810d570cfcf2cb1d8b6fd16ddabe35d93031d1d73cabaaf088d80321bab1788c38b1686b9d7169d7abd908dcaa01cb4d049735cbda40b092f77d4348b661f75033abbbe566d6e339af91d12e83665573c87272b811fa230e66fb7d17fbb4c63ff3a85540749bf048413e2e3c91710282250d8dc5aba212daa5ff086e379dc720696172cdc6b0c99df4df9"}, @TIPC_NLA_NODE_ID={0xb4, 0x3, "0e1ba7bf24cde7889df0db42cf6f78b766002645377adc16770b1f722a3c990e491b10be9d451ab6224c7097d6d18dbe2322d9072b29b7ce5ea5752e00af061e4444ffad8e1d5af27b76e59dbfe47a9fa52bf55b805647bc089ab8c0a821b271181ac046fe18574cc5a9eff44bc78a8ca51362f4d3267251fee247a518bed94610c1f3c860f37b26d5625ce71ca724dfff07d10bde3d18e170d8d50175fbeb02125796d9e233fc524ada0ebcd7a84787"}]}]}, 0x1760}, 0x1, 0x0, 0x0, 0x10}, 0x40010) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000040200000fd, 0x31}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x2aca85, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'memory'}]}, 0x12) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) 03:04:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x220000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd0ac74482a88d8ae}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x2b0, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "ef68b8ba3c49f420bca4463b1f81d769c9803f2935"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd2, 0x3, "d857de86d473b134a39df47777322eff52648fdb5bc64468f3b32fd73197f94946b60688488acb1e0d62dcdcc8cc23512acc650f6350468d13fe268867bcc99e3a61daa90dfa22ec752261d98f0d0bff884dfc242ac5e8a0030b4586e87b949a8c75ed8586cd9eaa789a1a2484f3b0def9c2cf491df2d28fdf71fda591106a7dd82b3b76d8c562d52971bb900b6eaf913340d97913c7dbb5b2582f695565b61ce922864ab2b480fbd0af3a6da334970d63b5db067cd54b3ad468f627ba8aa5befbb67a6862ac1d70ccaded60bc66"}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e00000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "22129d056522233751a03e732a8a0f5bb1a8f601b0e549077a40b9b1"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "88b1dc893ec5fe162cf6b38170b77327d2f8b5a257321470ee8a8ebd7c9614"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "a8e771f89823b81a9904e0c2fc0c482f8e8d2c6b5a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x8}, 0x4044010) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x258, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9800000}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbb}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8bdd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcd}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x33}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3fd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "24217ee8d02c445bfcd3bd31ff18f30852119fd1347e8a98a11acdcbdb2c7d45b1b16ded"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "0672ea853d8ba9a0328bf169062aac6a1404ca30ec314a93753fd07fa54129"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "5f2b401e3f0fb850fa0476b88be0667a2c6b088a91b8140a"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000800)={0x388, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdef}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe82}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x795}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd1b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "1b2ed1910f7fda1a93acc9750dc74f9b5c718d9f5e"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "5ab821abd90246f0fbfb2d98d9c04c537150cab2f304c579a683822dfb94e9f0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ID={0xc0, 0x3, "65ad0ea6779076b24868a81848d6b31d7b111e4b6769054622beac0697f006d7b73473f4d3507afaf271019712e648f565763c09a8b54698327dba8d953add97046876d2a7069b6423052c10b0886fc75715ff3b8473e911b65aa078b4b5d1321d7f7bb1675a91771d54d440c184b1e8a5efdc2b7726403f1baf048a587298f1a47e0bbae474f89559a968d74784914a945cdded4e33a51fe64f10316374d9d7e96080f7ce82e480e90b244f01d378e95e5d79a396d225eae78f4503"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x81, @mcast1, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80000001, @private0, 0x8001}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d723d99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbdc9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x802}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x543d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x388}, 0x1, 0x0, 0x0, 0x4008880}, 0x810) 03:04:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x7f2ff4a6b1e14be5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x40, @local, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @empty, 0x6}}}}]}]}, 0x88}}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000040)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@other={'unlock', ' ', 'io+mem'}, 0xe) 03:04:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:10 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0x8}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) clock_gettime(0x7, &(0x7f0000000040)) 03:04:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x400, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x822a4927267a1650) 03:04:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x80, 0x2, 0x1, 0xffffffffffffffff}) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f6, 0x10, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x48c0}, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x8, 0x29, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)) clock_getres(0x4, &(0x7f0000000240)) 03:04:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c0, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "e9a0a425472bf410a176ef4f0e49f406e81426ba8a0b4d33881049a6976a0dc9"}}, @TIPC_NLA_NODE_ID={0xc8, 0x3, "cb282c080259422f33cb4c49065de4b0a8974c5c08cf0de58bd4aab11e3fda3a0ac58f14d8bd59094ab5aeaca166f9cc99bb81cd65eafb8d01644978701a60d4dc36dfb4920a7d80cb58cccb59eb3b17365643f2997b5a430309ed026e95e25d9802c20badba414e678ac57ad70428b13af4d859990be7c349fd7ee4d8ef3f017218f49f8bcd0962c2fe153476993aaa00cad9571a233aa4cf05633b7941e23eeaba9b8725e3e2b419d239feddf10dde459f160c5b14053fe13bf80972fc85c9e06eb272"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2d21}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x73f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe9d0}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1cac}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x289}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x14004080}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x10b280, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xfffffffffffffff9, 0x8, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x2, 0x33}) 03:04:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r1 = accept4(r0, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000200)=0x80, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x28}}, 0x20000000) 03:04:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dlm-monitor\x00', 0x1a5200, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x4220, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0)=0x2001, &(0x7f0000000080)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x8, 0x4) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000001440)=0x1, &(0x7f0000001480)=0x4) 03:04:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x14000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) socketpair(0x9, 0x4, 0xc, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000680)=0x2, 0x1) 03:04:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 3: socketpair(0x4, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000001780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001740)={&(0x7f0000000400)={0x1334, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x10e4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0xd4, 0x3, "0033d6ba1713dd80b47762f261bf34588a3b3e2817ef019708ecb3cb6d334475acd6eedbf7422435178539b313169f6a64f96029145f0a02852fd82c3f7decebc513737da3de3051b89088db3283b78c0ab1045334913398ba36db56ea1307aa5e05bb4697abb3114bebaaef8b0895b356917c50bc0e971e7928dcb68173e43bf2cdff71bb14ec2ed5e170ca01dbb702d1ebfc80cda6917774bbecc81c5bb2434dff700c5fd11d0288da4403dfc8e68ee77fd416f7235fca1651d68ec354036758e0677d221041beab893136589ec1eb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "397393e627e654870669a6e959f686ed5421c6ff88e89f25512076"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "0cdb6ee133ed8712e52fafe38f59c96be5b2830f83a6b57ccfb55d12d088b0"}}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "9ff12a2e887835a2cf6ff1e9071ae4972ce90b7b57343f622103c72797ab6655e17f1e6acbbea6a361a45c22e10c172cfe976bd4e8dc5f28a7f6eb56d93e8db5777959a23a009cdc1de9a239c32f81fe02dce46661994923979ecb0d0bbc3b8f42bbc9f30a5db0490b22027931be8e5392b41c99e3a10b12fb3932df3da38c2c815668c370091193966a9e2e1ec72d644aabc88a7072c0fd6dc0"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1334}, 0x1, 0x0, 0x0, 0x48800}, 0x4000) shmget(0x0, 0x4000, 0x20, &(0x7f0000ffa000/0x4000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x20) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xf0, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xea}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x369}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x14}, 0x20000800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0x80, 0x0, 0x4000000}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x2000, 0x0, 0xaaf, 0x8}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f8, 0x400, 0x70bd28, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004840) 03:04:11 executing program 2: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x22, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x22}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x81) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r1) 03:04:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=0x10001, 0x4) 03:04:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0xd}) 03:04:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x105b83, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair(0x24, 0x80000, 0x9, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x64, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x209}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x38a3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040001}, 0x4004) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x200, 0x70bd2d, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) 03:04:11 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x78, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffc20d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48080}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) getsockname(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000680)=0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1d8, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x72a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff33}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6a7}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @local, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x44000}, 0xc010) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000100)='freezer.state\x00', 0x2, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, r0, &(0x7f0000000140)="3b958cb029fa0404205b53cb4e015fff6d7a9465", 0x14, 0x9, 0x0, 0x3, r5}, &(0x7f00000001c0)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xe6, 0x20, 0x1}) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x99f}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x59}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x4402, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x4000000000108, 0x12, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x483, 0x21, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) timer_create(0x0, &(0x7f0000000280)={0x0, 0x19, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)=0x0) timer_gettime(r3, &(0x7f0000000300)) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f2, 0x2, 0x70bd28, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000140)) bind$isdn(r4, &(0x7f0000000340)={0x22, 0x2, 0x9, 0x82}, 0x6) 03:04:11 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)) r0 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x9, 0x18080) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x6) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000000c0)) 03:04:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r3, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r4], 0x2e8}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r7, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r8], 0x2e8}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r11, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r12], 0x2e8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) getpeername(0xffffffffffffffff, &(0x7f0000000600)=@can={0x1d, 0x0}, &(0x7f0000000680)=0x80) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f00000006c0)={0x384, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r8}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r12}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x38}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xfbcb}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x980a365}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}]}}]}, 0x384}, 0x1, 0x0, 0x0, 0x800}, 0x1) 03:04:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x412841, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000180)=0x3, 0x4) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:11 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8020100}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x220, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd4, 0x3, "f29e56e15eaaf907a575ad8f501588f997e482e008570ee97a3d275f7a03a54aea04eaaf8abf9f28fa6999998f518cf3c27580fc6f15a69c9b22cc6bd4ed88ff48ee2e8834545c226b1d6eb33e0e14c6635f5f3135e9f6ac0941a7ffd3764aabe42721d24806b6f53a4769e20a4bc18ec810a53ff0e10e2106fd60e404af448b4f7c99ed89675d67c9894b262b2af38904b2474880a00af4539592f82c08cbb0456fb2e4c3b447181584597a4fc71dad1582c8b33dc34aad7721ca44c646f5de3cee1dd4c4b684c1ff703b07d9bb4350"}, @TIPC_NLA_NODE_ID={0x61, 0x3, "0bea40c8efbe614930c02bac64fa544da530d6921c4a077326c1a7cbcd00df51614f8812098539858647743de1ca9d9b503caf3b99cb1b24e18e10dac1eb58538c1e028c971a50fa9c884c3ce1ad8df7aa4c7521cd74ce25a7322bd069"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "33033dbe56bdcef9991b2a0e1223c6f839aa1d85731c6aa8247f1d106cd8ae66044c4660"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "ce437a221cd3875a9584da165e3a43446c38b863a9ff4d61df4f"}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x2040002}, 0x8040008) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040055}, 0x40000) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x7d, r0, &(0x7f00000000c0)="f4f41004a96e72e2cdc115f20a786823ef259577dda4f460b048dc701beb9f8f7f6ebe6395478839702cc547478db759ad69620761963542573ff840f79480d68b0569cb33bab458028aeaed30a62d35def47a289cd6b2de8eb9264be9f012692111f3249541f461b99436442ff1b72781445a1603541fcb39e0b0ff9a5ddfe506e7de34b2e6827c4ce092a66f6c32d7bbf896a18d34e8a899938742815ebee011", 0xa1, 0x6, 0x0, 0x1}, &(0x7f00000001c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x92080, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x40003, 0x2f}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000), 0x1) 03:04:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$AUDIT_USER(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, 0x3ed, 0x1, 0x70bd25, 0x25dfdbfb, "2269e3dd7a8441de259c45e6e844c9a78603b347e5ace8f2fc69e40a57583263090aab4181dcd82de2a8d0eb217804a76156b4200c2097b9f90bb58ca5187164992297e7e0bd8ddbae2c4ec6ffda2007943b94b989dd2ccf14a1fa313d2ba506227dc3adb49409551a8f4263acf9dc957103f45bbfbc0c77ed6d8cf8c15a9aabe695b5f9cfb35a91440f9348d1c8fcd537ddea28f06af20638c635924baca21270a0693ea6e941104bd4a95e893bc50a57aa2c9efae1caf7e29838ab1ed7aff3df5c077af2881afc81ede4b5893ec00fa2adb2d4c3316d50add7c37a0f5bfae6574bca02953b0baff46b463a5b", ["", "", "", ""]}, 0x100}, 0x1, 0x0, 0x0, 0x890}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2d637075202b6d656d6f7279392b70696473202b696f202d6d656d6f7279202de3faafe0cdbabc8d69ce7ef19c7e99285c14fb13fc1800"/66], 0x27) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20000000080065010101000000000000000000020000"], 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x91) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x2) 03:04:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r2, @ANYBLOB="01002abd7000f7ffffff0300000008000183", @ANYRES32=r3], 0x2e8}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x81, 0x400, 0xb, @remote, @private0, 0x8000, 0x700, 0x3ff, 0xfffffffd}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r7, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r8], 0x2e8}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r11, @ANYBLOB="01002abd70006b7400000300000008000100", @ANYRES32=r12], 0x2e8}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10001500}, 0xc, &(0x7f0000000980)={&(0x7f0000001040)=ANY=[@ANYBLOB="14050000", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="20fa01803c00010024e50100656e61626c6564000000000000000000000000000000000000000000000000000500030006000000040004000800060033ec788c0ee6a6dbc0e263f77b155ab26ce9b185cb8b430df6810935bfbacacc99191d6cf7b9d0c47d37df2392fe546f70b3ecfc42b1b57a7ad070f58bd0d1f95b73bc1b9834bd333a555ae488bf1e39c4d70cc777b2861778de5a0f30a3372b0ee24786aab9446b9d1f007b0494746717689096991319c3299abbad06fd3b170558eac6a0c8c9deb2e84768747b784fba8b2c048488200e50ee840759999ea16239e7a1681893b1793a6be9d1", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000002000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100010040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000020000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004008000000008000100", @ANYRES32=0x0, @ANYBLOB="800002804086efad1ed18f85e0625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff03000008000700000000003c000100240001006c622e7365ba296c9ca86f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040002000000"], 0x514}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004010) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x10c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf8a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf88}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9b1}, &(0x7f0000000140), 0x0) 03:04:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x8, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) [ 1457.414634] nla_parse: 40 callbacks suppressed [ 1457.414641] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.2'. 03:04:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x40008000fd, 0x3f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x6, 0x0, 0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:11 executing program 4: r0 = getpid() timer_create(0x1, &(0x7f00000000c0)={0x0, 0x3b, 0x1, @tid=r0}, &(0x7f0000000100)=0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c80f0000", @ANYRES16=r5, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000001}, 0x8c0) inotify_rm_watch(0xffffffffffffffff, r3) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) timer_gettime(r1, &(0x7f0000000780)) openat$cgroup_procs(r6, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) r8 = accept4(r6, 0x0, &(0x7f0000001340), 0x800) sendmsg$AUDIT_USER(r8, &(0x7f0000001540)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f00000013c0)={0x110, 0x3ed, 0x80, 0x70bd28, 0x25dfdbfe, "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", ["", "", ""]}, 0x110}, 0x1, 0x0, 0x0, 0x4008044}, 0x48841) openat$cgroup_procs(r7, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000dc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000800)=ANY=[@ANYBLOB="44050000", @ANYRES16=r5, @ANYBLOB="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"], 0x544}, 0x1, 0x0, 0x0, 0x40}, 0x20004150) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000e00)=ANY=[@ANYBLOB="4c020002", @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf2513000000000001800000010069623a767863616e3100000000000400000001000a004e240000000700000000000000000000ffff000000006c8c0000000002000a004e2000000000fc00000000000000000000000000000108000000000002800000030077a5000000000200f10d0000000001001a00000000000200d00a0000000001000100000054000680040002004400040067636d28616573290000000000000000000000000000000000000000000000001c00000051799d6ff5211ced1f134f4fddc48060ef4c7fab653f4e6b7dff1bc70400020004000200780004800000010062726f6164636173742d6c696e6b00000900010073797a31000000003400078008000400aff10000080003000300000008000100190000000800010001000000080001001600000008000200001000000c0007800800030009000000f1fd0780080001001900000084000180080003009e9900002c0004001400010002004e21e000000200000000000000001400020002004e23e0000002000000000000000038000400200001000a004e220000000920010000000000000000000000000001070000001400020002004e220a010100000000000000000008000300ffff00000c00028008000300000000c04c0001802c000280080004000200000008000200080000000800010016000000080003001209000008000400ffff00001c000280080001001f00000008000300090000000800020018020000"], 0x24c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) [ 1457.460792] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1457.483548] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.2'. 03:04:11 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x1c5b40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4c100, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x20040, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40000, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x3c, 0x1}) [ 1457.510810] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.2'. 03:04:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) 03:04:11 executing program 4: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:11 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) r1 = accept4(r0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000080)=0x80, 0x80000) getsockname$packet(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40a002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xc001, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000140)) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) r3 = socket$isdn(0x22, 0x3, 0x4) bind$isdn(r3, &(0x7f0000000180)={0x22, 0x7, 0x1f, 0x7f, 0x1}, 0x6) 03:04:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40a040, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:11 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) 03:04:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x74ab80, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:11 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x18}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2363}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000540)=0x1, 0x4) 03:04:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000f9, 0x2f}) 03:04:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:11 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x4c0000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x2) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', r2) 03:04:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0xf}) 03:04:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xfffffffffffffffb, 0x2, 0x1}) 03:04:11 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r2, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r3], 0x2e8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001180)={'syztnl1\x00', &(0x7f0000001100)={'sit0\x00', 0x0, 0x2f, 0x3f, 0x4, 0x4, 0x40, @ipv4={[], [], @broadcast}, @dev={0xfe, 0x80, [], 0x39}, 0x20, 0x8000, 0x6, 0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r9, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r10], 0x2e8}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001440)={&(0x7f00000011c0)={0x258, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x86}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socketpair(0x2c, 0x5, 0xd06, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ADD(r11, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x208, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x30, @private1, 0x40000000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x74}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x747}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xcc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdc63}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1681}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7efc9aca}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xaec}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x788}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 03:04:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:12 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4200, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) [ 1457.933443] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r4, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r5], 0x2e8}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r8, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r9], 0x2e8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x1c4, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfbfffff9}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xdc6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2c8f2}}, {0x8, 0x6, r10}}}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x95}, 0x8000) 03:04:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xe48, 0x2f}) 03:04:12 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x4543, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) [ 1457.975637] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:12 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x1040000000fc, 0xf}) 03:04:12 executing program 2: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00800ccb90000000032c3cd4544c5db87596a0cf9ad6d7fd16dad401ff2b523e275d0180b5743d815fa86ecfc385dd5930eb5282dd0c48d51374e23da0d874643a288859bfcc90521b10276b75d0dd500c84fd837e8a3fb4c40e", @ANYRES16, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32], 0x2e8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r3, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r4], 0x2e8}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r7, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r8], 0x2e8}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000000280)={0x650, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x204, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x4, 0x86, 0x80, 0xffffff80}, {0x4, 0x9, 0x0, 0xfffffffc}, {0x9, 0x2, 0xc7, 0x3efa6ca}, {0x9, 0x7f, 0x2, 0xffffffff}, {0x100, 0x7f, 0x80, 0x2}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x3, 0x1, 0x8, 0x7fffffff}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xe9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9d3}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x35}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r8}}}]}}]}, 0x650}, 0x1, 0x0, 0x0, 0x4000090}, 0xc0080) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x14180, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r10, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$VFIO_GET_API_VERSION(r10, 0x3b64) shmdt(0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x822c00, 0x0) [ 1458.023903] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1458.050898] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:12 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000002200)=@nfc_llcp, &(0x7f0000002280)=0x80, 0x80000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000022c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)={0x5b, 0x1, 0x4, 0x800, 0x7fff, {}, {0x5, 0xc, 0x0, 0x1, 0x1, 0x5, "f9bfdcc9"}, 0x2, 0x3, @planes=&(0x7f00000001c0)={0x9, 0x4, @fd, 0xaf7}, 0x100, 0x0, r3}) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000800)={&(0x7f0000000680), 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ef4160}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x30000}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x4c840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0xf0000348) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00', r4) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7c040000", @ANYRES16=r6, @ANYBLOB="000427bd7000fcdbdf2513000000a40006804900030047973c7986786544cd5769a4c7dce3271d58cf248902084743f76f487f1147c9f4c223318a2177b061473e24799b5c53c9790b758325fc3b5c997727a5f6d50078f07036840000004100040067636d28616573290000000000000000000000000000000000000000000000001900000020b078fc36c5154d2921c1200210fd5d282703d6de9f336eb7000000040002000400020008000100060000000c0009800800010094a1000014000280080001000400000008000100090000007800018024000280080002000400000008000300060000000800040008000000080001000600000044000400200001000a004e210000000920010000000000000000000000000001ff070000200002000a004e2400000401fc010000000000000000000000000001090000000c000280080001001a0000001c000980080002002000000008000100ff0f000008000100040000005400038008000100030000000800030002000000080003001c0f00000800010001800000084d0100060000000800020004000000080001000400000008000200ff0100000800e9ff0500000008000200834a00008c010680040002004c00040067636d2861657329000000000000000000000000000000000000000000000000240000008412e44f0f6fec068a842debcc4fc1a80ed03156e7dbe2aace7d72ddf84814908485e0be040002003e00040067636d286165732900000000000000000000000000000000000000000000000016000300cfc031c0aaaceef70c029fd45d0ad7b583dd115753270000f1000300ed866b75c58d3a1450a1189928391652fd2f04641cc58fdba0d980b3e174c06a8a9b2104be8c82f1d55559b3b748d569e3e2da1246894238b165b85096f075be391f037a9a1ae1a2934a7eaad804a8109e5af89c0a62209d1783a2240c4dc6e8de684c412a16460fe2b0dd255a1a5357b945659a588be6716a30739644c8a35e4a111d4f7b1c058c91e8f77073278d30c098a0b86386c9b65f024fb62f653cbc720dbfa8e422ae880b61b0b77938bb548c87f73fb18f5be4229328e3b350be2f566663b118bdc77fbb39b8b34a8c088d4db530e3e8edfd177ed2fce2a057c93039a107431eeaa6b40475beeaa2000000200001801c0002800800020000080000080003000300000008000100070000001001058008000100756470002c0002800800010010000000080001001c000000080001001a000000080001000900000008000400070000001c0002800800030006000000080004000100000008000100040000003c000280080002000400000008000300090000000800040001f8ffff08ff020003000000080004000200000008000400fb5d0000080001000c000000080001006574680007000100696200004400028008000300010001000800030002000000080003000000008008000200b8ffffff08000100150000000800020002000000080001001e00000008000300ee56000008000100756470002400028008000300f8ffffff08000300060000000800010008000000080001001b000000f7514f353a00"], 0x47c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000bc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2e8, r6, 0x301, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "0ad89c1190b6a8c7b1593e3d0e8c1991da4268b92c4ffc5c6cdfdce5118f2cc43021c448"}}, @TIPC_NLA_NODE_ID={0xd2, 0x3, "554f5a564f25534ac5dd98e3e878b342fa2542d1ddcc6dccfe3df870a32c5d306b5656b726c1dc77581208827687b3fec6249c4c0ecfec3ca28f28a1c3effedef2eaa3292d34860e52e93034b4c2008a0cdc7c43fa739d1e4ff33c497345fb5d5321649108bec3ff2111a80ec1cf6d259c75959def0a61ed0c9f4fea8f8ac2a1534e68f95d6635267a672f21d9f13ff74c574ec10ad5e1ee24a2e1e17f5256a12a39d0d6a0534c1c29f1f2b2314f50ea0685d73e29cd9417fe8a5492846580f85e1df6cb8af841c8ecdf38ac6648"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "8bb0bf6167ddf71b667e2afbace4f7f20ebebcb06f53424ce3b1285557e538"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe5e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x77}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xec}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe6}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4000}, 0x800) pselect6(0x40, &(0x7f0000000000)={0xffff, 0x100000001, 0x3d9}, 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) [ 1458.070590] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.1'. 03:04:12 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f, 0x1}) 03:04:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) [ 1458.099028] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.1'. 03:04:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0x6, 0x3, 0x100, 0x8, 0x3a, 0xf3c5, 0x2}) 03:04:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_genetlink_get_family_id$nbd(0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r5, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r6], 0x2e8}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x8804}, 0x44010) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', r2) 03:04:12 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000e7c0c323b1d419056afbb78a0c1404000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x23c, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, [], 0x1}, 0xa8f}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x54}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @empty, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x22}, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40}, 0x34) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000180)={0x0, 0x7, 0x4, &(0x7f0000000080)}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0xe) 03:04:12 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x4, {0xa, 0x4e21, 0xfff, @ipv4={[], [], @private=0xa010102}, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0xe482, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000180)=0x7, 0x1) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x2b0, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97f9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "902f5f40cc44065e976505c4423c5fc38b98323870b480c40660dd125ad7d6"}}, @TIPC_NLA_NODE_ID={0xa2, 0x3, "c502e2a508922d94fc7bc2bf4fd35a91b0260b0405108859120050fb9b6981b7b3fd52d08f882bf4573a1bc25a5eaa9dcfb59e29b8f5ed0c207cdfb9ca40e6d9c7a47f579764a31284bab9e1a07b804caa8e7ffe8610f99392d10dbada3eee6a8898d6e0aaa06390330e3397d3f1aed44b630db879021488038b19dda8e5bf9c549315d70e374e684b27860f332d00a1c7e266381919f6bd66e23b891d8f"}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x280}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x52}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 03:04:12 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0xffffffff, 0x3}, 0x0, &(0x7f0000000040)={0x3f, 0xfffffffffffffffa, 0x800000000000000, 0x0, 0x7, 0x0, 0x6, 0x40}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:12 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, 0x0, 0x0) 03:04:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x101001, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x164, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7c37b2b6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffe00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x21}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xa8b, @remote, 0x7a9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @initdev={0xfe, 0x88, [], 0x80, 0x0}, 0xa358}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x74c8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x1}, 0xc0) 03:04:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)) 03:04:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10100, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x4, 0xc}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x35c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf82}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc97}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, [], 0x1}, 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @loopback, 0xff}}}}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x140000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3139bfac}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xde, 0x3, "6d9d111584c13b0eebd7ead445d36cffe914c7d2dd77e59a3258c507ed27670abea05b8d8b5aa69b676e92f3747a2eee18d7a4aa3843c33591ad4047a3be920f112c3eabda01f3457c4852d816d5088ad1a73c6a894f8e0c75e2dccb7f5e4c2ef83c81994bbd171f9313d16a1d476fb7207a2dda6349e7ac3a4652ee1f8ffb319577b851797590ab3d96f21a37d1c1a47106f92322d23ee1473554aec6b93e27157202296d9447fefe098dbec87c688fd925dc0486a3a54d9ddbc01ea993ca3d27bcdbbeb63413cd1d317620cec827bcc47b9ce5419fed4443ec"}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55beebbd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x20000005}, 0xd0) 03:04:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r4, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r5], 0x2e8}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r8, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r9], 0x2e8}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002740)=@can={0x1d, 0x0}, &(0x7f00000027c0)=0x80) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002800)={0x640, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x154, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x612}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x12000000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xbfe6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4ce7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x14e}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x54, 0x4, [{0x8, 0x3f, 0x81, 0xfffffff9}, {0x80, 0xfb, 0x6, 0x7}, {0x7f, 0x1, 0x4}, {0x781b, 0x7f, 0x9, 0x3}, {0x6, 0x1f, 0xff, 0x3}, {0x38b0, 0xff, 0x3, 0x1000}, {0xff2c, 0x8, 0xae, 0x1f}, {0x8000, 0x80, 0x80, 0x7}, {0x40, 0x40, 0x4, 0x800}, {0x2, 0x7, 0x5, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x640}, 0x1, 0x0, 0x0, 0x20040800}, 0x4004810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r1) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) 03:04:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x226880, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r9, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r10], 0x2e8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000a80)={0x53c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xeb}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x27c9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8dd}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r11}}}]}}]}, 0x53c}, 0x1, 0x0, 0x0, 0x40}, 0x10) write$vga_arbiter(r5, &(0x7f0000000140)=@target={'target ', {'PCI:', 'a', ':', '16', ':', '12', '.', '4'}}, 0x15) r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r12, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) bind$isdn(r12, &(0x7f00000001c0)={0x22, 0x7f, 0x1, 0x43, 0x6}, 0x6) 03:04:12 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 03:04:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x101002, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0x2}) 03:04:12 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', r0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x4000c}, 0x44885) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00'}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00', r5) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000002c0)={0x0, 0xffffffffffffff24, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x2e8}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}]}, 0x2c}}, 0x4000001) 03:04:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x180600, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0x1, 0xd}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x4}, 0x8) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:13 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, 0x0, 0x0) 03:04:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f, 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000040) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002400080027bd7000fcdbdf2409000000060003000000000006000300000000000600030000000000060004000000000006000300000000000600040000000000060004000000003130d432687b000600"], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x20000891) 03:04:13 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x290200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x0, 0x20}) 03:04:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x100, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r3 = getpgid(0x0) sched_rr_get_interval(r3, &(0x7f0000000040)) io_setup(0x103f, &(0x7f0000000140)=0x0) io_destroy(r4) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00', r0) io_getevents(r4, 0x9, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}) 03:04:13 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x11c, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x42, 0x3, "c67ce0e0645a1530967ce8c5bb97f8fdb6186838d2144759b74af5a2975d60aad8623f9e783a6668bdf0798b03d90f8ddcf79c8e57b58914969d9e5af85d"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "8b2c1c3573695a7b2589e76c73254766c65eb27868173ccbd85a6d9a1644b5ae77"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "0387c8db84997b55ed3d08c55f1596e78e31e943d7e045440aa753dfe8e63d563634cfd9"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x10}, 0x24000810) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xc00, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:13 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x3000000000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4}, 0x0, 0x0, &(0x7f0000000100)={0x4, 0x0, 0x5571, 0x4}, &(0x7f0000000140)=0x800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x9}}, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x420100, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000300)={0x2, 0xffffffffffffffff, 0x1}) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x800, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) bind$isdn(r2, &(0x7f0000000300)={0x22, 0x1f, 0x0, 0x0, 0x7f}, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000380), 0x4) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0xc9e, 0x4) sched_rr_get_interval(0x0, &(0x7f0000000300)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0x12) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) accept4(r0, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80, 0x800) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000280)=0x81, &(0x7f00000002c0)=0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000140)=0x4, 0x4) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000240)={0xee, 0xf}) 03:04:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x4000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x4, {0xa, 0x4e23, 0x10000, @local}}}, 0x38) 03:04:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:14 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, 0x0, 0x0) 03:04:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x8, 0x0, 0x2, 0x401, 0x6, 0x7f, 0x9, 0x2}, &(0x7f0000000080)={0x1, 0x3, 0xffffffff, 0x8, 0x2, 0x4, 0x1000, 0xaa55}, &(0x7f00000000c0)={0x7ff, 0xfffffffffffffffc, 0x3, 0x10000, 0x6, 0x800, 0x4, 0xe8ca}, &(0x7f0000000100)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000002, 0xc}) 03:04:14 executing program 0: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000002c0)={0x2}) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f6, 0x400, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20008405) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x66441, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x800, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)="f3be0c9a791aaec712c9623b0d2689c3d5ac38976bbef4608ed01a947d8e85dd523fd720ebfd15be80e12dbc0f116fd6de1d2e57f8bdf8d766fe011853c6ce9eb13edb95d9ff9bf93c6ec5cb961eac131b5f7332e836edaee8d1deb473be8199f3862b39ea935c42a2ac67c8dea34f9cb83ce56df69568d5e7ea747116ac6604c668ef5af7859867d96b0f69616c3247fa04a7638c999aa8d076389d7016b735eda4ed0e79888a9cbbeb86861501632d0f5622b34963033528ba3fedd20ccd7bfb5ff3a0f1519a5fc04e42f9670cec26bb", 0xd1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:14 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0xcb3529b6887785d9, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x21, 0x1}) 03:04:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x1, 0x1, {0x9, 0x2b, 0x2, 0x3, 0x3, 0x10001, 0x2, 0xb9, 0xffffffffffffffff}}) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x101100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x438240, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x345000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0xfffffffffffffffc) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) 03:04:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000240)=@l2={0x1f, 0x0, @fixed}, &(0x7f00000002c0)=0x80, 0x80800) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x140, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8c, 0x3, "fc9c20b78a4d767769e59e8d384c1bfcd387de2569863f2f4fd2e9d4b9709d3be50aed8be2caec8558dd2e4c626e8f9203119e95b7c5c30c9d73f33c12b9e091e071ed60ea314a79edb2dea2228c5be6d8e21579e9ed3463452dc506f2226d56388623457cd0c3d371002a156965ab615d7d7d3ec10e654dfb69c42d79ce7ba104f75b9bd03fdf6f"}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9fed}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x478}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf23}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffd95}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r2) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000ecd52fc0ffc2c35c9f02688ba9d34d0b10d3cb1b170e47ebf308a4656c41b63c51af55fbe87bdb90f4e24ca3d95eb179c95ebf9b9a1608", @ANYRES16=r4, @ANYBLOB="00012cbd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x20000000) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x49012a480623f9ab}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000040) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x80, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x402800d) 03:04:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x2, 0x2d, 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11000400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x87, 0x3, "029296b4314a49b1b187a78f9147e7ff1e6bc4806f94ca768aaacc4d317e608f8bb357bb1b86b21378f0914a738a2c878fc3785515928482219d589a6feff58b112a825fc7e7382208a2fed67412d91c5ed4303eb9afbe5f3e42a7a7051130f8af68c6dca7e3a3a3e88d65695c4c030abecbbf5edb5c9ae81d3a568a8ffef9bf129ddb"}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x134, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "a9eadda3c655b59126427b8ef2457acdd209858f"}}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "ed97d70e8245ff8543908ef984ef939656c4d0d3b9f70630fd0b8d1e4a1aca21c6ff4f0e1e4a73687ad8b18233260532498612a2b73ee30f3a6774f5a78f31f7f56dcabf3ab587b07e18c19d5096fc45bd7205f68953db2f28975aa33472c68fc15774919faf0de78d5d7a5b4ea366df302961c1ae94978530a38dc75ec23a8a96d370d28730cd0898a1305e0598d221ada20ed979fcf15d07dd97a28a2434e7953bfd448f459ce5f9c36a6a5926ec569f6ae8ec614a78520f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 03:04:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:14 executing program 4: write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x2b, 'memory'}, {0x2d, 'io'}, {0x2d, 'memory'}, {0x2b, 'memory'}, {0x2b, 'rdma'}, {0x2b, 'cpu'}, {0x2b, 'rdma'}]}, 0x2d) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c00a5233fc2e47f7e481ca67400fcdbdf25", @ANYRES32=r2, @ANYBLOB="05000300060000000800080064010100050004000100000005000300320000000500020002000000040005001400090020010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x8000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:14 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x1a5201, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0x1}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000000)=0x7714) 03:04:14 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x2ac, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f3a4eae9490939a390315b141418b0715fca010b694558"}}]}, @TIPC_NLA_NODE={0x1d0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcc, 0x3, "c2005c7266c6123e53cab553c3e2dd92ff876fa8cea5809a0e645a74fd4a2219088d56d73be8822bd50f0673d6053b1ead23342c32b993c23dba63023325326681c38e36d6a145969af317ab97f780d0c43f1a1866ae44c3b14bde4b9d156e548631839af09d1bf481a351b7cae82a9f52feb28aee7ccbc41a6b0c6fffcd63d30ab2de525f7ae8715c87e8a2301647845bb49eaada14216b6238a64ce228365422cc4d95d687f8fc5d4ce6acfb45182ee1de4625fa533b4faf279d1286def48558082291c36cff45"}, @TIPC_NLA_NODE_ID={0xe7, 0x3, "83e9717db88de15b4aa9d0de6c691c266e89b52a8d8a620f20ed40dfcdb18c6acb45dd8b96a95d182caad8c5e94d461843e6ba2223bee1b8d1107a2502315a1340c01fca8ae37936a373fac35ea425e041289858b15a4dcabd26b4cea090cc269aeef4988145811793a419aecf5daba52ca99ddff0b182af0f956093dd40668250881fe0731eb49cfd2387b6bcde01b232accdea0a5083d2f398fd96f1755f27dee77a20c08b09ad14f402f12737b0d5e392c2fcbea587a9f5137c8a7dd6f4b93ffbc5e185c30bef9e228486b523b520697a6c1ad8fa3249af30251f3e0c696b2449d5"}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x48010}, 0x4000080) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1bc, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8e}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e454764}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x93a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe789}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7be}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2d5fa119}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb35d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2400000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x8, 0x2, 0x32, 0x3, 0x9, 0xfffffffffffffffb, 0x6, 0x7}, &(0x7f0000000080)={0x8, 0xff, 0x6, 0xff, 0x9, 0x0, 0xfff, 0x3}, &(0x7f00000000c0)={0x9, 0x4, 0x20, 0xffff, 0x5d9c, 0x4, 0x1, 0x10000}, &(0x7f00000001c0)={r2, r3+60000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x8]}, 0x8}) 03:04:15 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) accept4(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80, 0x80000) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:15 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400003, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x4100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x9b}) r1 = gettid() sched_rr_get_interval(r1, &(0x7f0000000300)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r1, 0x12) 03:04:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000200)={0x401}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f6, 0x100, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xd001}, 0x10080) 03:04:15 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10001, 0x0, 0x1}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x28, r4, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x10) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002abd00002000000000000000580004805c000780080004000600000008000300e436ce3a08000400000000606968b198b89a8a000800010014000000080003006fee000008000300128900000812f441217f00008800020006000000080004000400000009a4d10f051f44bca88dc4faccff8636085373487a61915c7cdfac2a6fbb5f7f82e080"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)={0x2cc, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7a2500, @local, 0x7a}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @remote, 0xa0c}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4af}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x44afc37c}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x69b1}]}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7f, @mcast1, 0x7fff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffff01, @dev={0xfe, 0x80, [], 0x20}, 0xe1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x404c800}, 0x4044080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000880)='freezer.state\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00', r1) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x44, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008005}, 0x91) 03:04:15 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) getsockname(r3, &(0x7f0000000240)=@tipc, &(0x7f00000002c0)=0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc1de, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa589}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_MON={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r4, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x5a, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x0, 0xffff, 0x1b}, &(0x7f0000000300)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x7}}, 0x10) 03:04:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000240)=@l2={0x1f, 0x0, @fixed}, &(0x7f00000002c0)=0x80, 0x80800) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x140, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8c, 0x3, "fc9c20b78a4d767769e59e8d384c1bfcd387de2569863f2f4fd2e9d4b9709d3be50aed8be2caec8558dd2e4c626e8f9203119e95b7c5c30c9d73f33c12b9e091e071ed60ea314a79edb2dea2228c5be6d8e21579e9ed3463452dc506f2226d56388623457cd0c3d371002a156965ab615d7d7d3ec10e654dfb69c42d79ce7ba104f75b9bd03fdf6f"}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9fed}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x478}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf23}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffd95}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r2) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000ecd52fc0ffc2c35c9f02688ba9d34d0b10d3cb1b170e47ebf308a4656c41b63c51af55fbe87bdb90f4e24ca3d95eb179c95ebf9b9a1608", @ANYRES16=r4, @ANYBLOB="00012cbd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x20000000) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0x1, 0x1}) 03:04:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) 03:04:15 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x39}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:15 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x4, @loopback, 0xc9c8}}, 0x0, 0x0, 0x2f, 0x0, "b7ae8975e52ea9986452029bf058e64cd5ff541522c768f488f44c55cb618d1ebfc04e7c5031fe140bacdf90921e7c9970b8732baf501e1a68156e7f7eea171855e4102d6e97ce6046493df2a4db1001"}, 0xd8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000100)=0x7) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x125002, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x8000, 0x18}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, r3, 0x610, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7040}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 03:04:15 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) accept4(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80, 0x80000) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xe}}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8841}, 0x24) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4180, 0x0) 03:04:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x60000, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x1f, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r1}, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x443000, 0x0) 03:04:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x2) 03:04:15 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xcc402, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x2) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x9, 0x8}) 03:04:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000640)={0x401, 0x2, 0x4, 0x1, 0x30, {}, {0x2, 0xc, 0x81, 0x9, 0x0, 0x1, "f26f04a4"}, 0x6, 0x4, @fd=0xffffffffffffffff}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000006c0)={0xffff, 0x6, 0x4, 0x40, 0x81, {0x77359400}, {0x2, 0x0, 0x6, 0x3, 0x1, 0x5, "3f35c59e"}, 0x1ff, 0x2, @fd=r1, 0x4}) 03:04:15 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) getsockname(r3, &(0x7f0000000240)=@tipc, &(0x7f00000002c0)=0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc1de, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa589}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_MON={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r4, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x5a, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x0, 0xffff, 0x1b}, &(0x7f0000000300)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x7}}, 0x10) 03:04:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xfffffffffffffffa, 0x2, 0x1}) 03:04:15 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) getsockname(r3, &(0x7f0000000240)=@tipc, &(0x7f00000002c0)=0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc1de, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa589}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_MON={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r4, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x5a, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x0, 0xffff, 0x1b}, &(0x7f0000000300)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x7}}, 0x10) 03:04:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ethernet={0x0, @local}, &(0x7f0000000140)=0x80, 0x800) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7132}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "69d0250fdb9f0cdf7579c516b6bc0913ba47efb3953033543954330cd66167365b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040048}, 0x80) 03:04:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x7b, 0x4) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:15 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf25020000000c00078008000200897600001c000380080003000100010008000300a70300000800020004000000440009800800010084d5000008000100b5ffffff0800020005000000080002000300000008000200c2c9000008000200ff070000080001000300000008000200ff000000"], 0x80}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 03:04:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x2, 0x4}}, 0x20) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000680)='fou\x00', r4) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000480)=ANY=[@ANYBLOB="d700000001000000060000000000000001fcffffffffffff2444d80a4730cfedaf40558e099cfdc84bbefe2ea24b246e7010613f5182bbaed56ecba9f7a89fa7e06b03f665cb4fb243126d9381272310968a9d0f8b1ea52748dca659f1fc5b3f3fdba71769afaffa8fd6f53271f75214a1825f70954a2b5bc2f88def3f574c38371136f79bdfa8bc72ef80b6e7fa6455964eb25bef736d8f0aaa9dcaf12881e66b5f19cc1ff98bcb728996e7e0edad28bcbb4215b677f2a6161d44153612f87286cfcd54bcc8be1cefea8a7761e4c66469ce6832ba3075"]) recvmsg(r2, &(0x7f0000000380)={&(0x7f0000000100)=@qipcrtr, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f00000001c0)=""/125, 0x7d}], 0x2, &(0x7f0000000280)=""/206, 0xce}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd26, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x2c}}, 0x40000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) getpeername(r5, &(0x7f00000005c0)=@ipx, &(0x7f0000000640)=0x80) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) memfd_create(&(0x7f0000000580)='/dev/ion\x00', 0x0) 03:04:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x77359400}, 0x0) 03:04:15 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) getsockname(r3, &(0x7f0000000240)=@tipc, &(0x7f00000002c0)=0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc1de, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa589}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_MON={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r4, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x5a, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x0, 0xffff, 0x1b}, &(0x7f0000000300)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x7}}, 0x10) 03:04:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x40000000fa, 0x27}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x3bc, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x316eed62}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x49c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x97}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xea}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71e15f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc7ba}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5ac}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfbfa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa9e9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x663}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8ce}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @private1, 0x7fff}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa324}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x100, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb789}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}]}]}, 0x3bc}}, 0x400c811) 03:04:15 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x2000, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x33, 0x0, @thr={&(0x7f00000000c0)="8c416be875112d73ed45a92b499d20ab403925539c96c407bc8574629032520b8f3df647c18920640059a3c14e763bc7e225f725d8b7087e526282d47530185c3e438af2a5717ba7cf0b", &(0x7f0000000040)="8fcf6e0213f97a9a79d02abed4de21d4d4693b0027e5a21f4ae2dea595edaf25f10deb078acba5cd8437d8a8ce16c7151b"}}, &(0x7f0000000180)) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x31, 0x2}, &(0x7f0000000200)=0x0) timer_getoverrun(r1) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000280)={0x0, 0xfff, 0x5f7, &(0x7f0000000240)=0xe5be}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8010000}) 03:04:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r4, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r5], 0x2e8}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r8, @ANYBLOB="0800010000000000", @ANYRES32=r9], 0x2e8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000036c0)={'team0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r11, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r13, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r14], 0x2e8}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000003dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003d80)={&(0x7f0000000280)={0x670, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r5}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x28d}}}]}}, {{0x8, 0x1, r14}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffffeb7e}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x7, 0x4, 'roundrobin\x00'}}}]}}]}, 0x670}, 0x1, 0x0, 0x0, 0x811}, 0x4000040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:15 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) getsockname(r3, &(0x7f0000000240)=@tipc, &(0x7f00000002c0)=0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc1de, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa589}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_MON={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) 03:04:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd8, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcfd4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1106}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfa}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa95b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff59}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc8e0}, 0x20000800) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00', r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5164}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2d, 'memory'}, {0x2b, 'memory'}, {0x2b, 'io'}, {0x2d, 'memory'}, {0x2b, 'pids'}, {0x2b, 'io'}]}, 0x2c) 03:04:15 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x185300, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="8000f900", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf25150000030004000000000000000c000300a20900000000000008000200ffff000008000100008000000c000400e30000000000000008000200060000000c00040002000000000000000c000400ff7f0000000000000c0003000000000000000000080001007f00"/122], 0x80}, 0x1, 0x0, 0x0, 0x48050}, 0x4000040) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x20, 0x70bd28, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004804) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f2, 0x300, 0x70bd2d, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000140)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x143180, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x10, 0x3f2, 0x8, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000340)=0x4) 03:04:15 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) getsockname(r3, &(0x7f0000000240)=@tipc, &(0x7f00000002c0)=0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc1de, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa589}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_MON={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) 03:04:15 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x428480, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x200001, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x299}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x4, 0x1}) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) 03:04:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000100)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:16 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) getsockname(r3, &(0x7f0000000240)=@tipc, &(0x7f00000002c0)=0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc1de, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa589}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_MON={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) io_setup(0x103f, &(0x7f0000000140)=0x0) io_destroy(r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r2, &(0x7f0000000040)="c9cd6173025d5b2e80441e9efd01130ebc97049ed07618165e24a1160ac8cc20b98b82c268034b8df3331831850396a3d7b4ee924c2bb21039e9aa238fd6a0f73a5c02a141ed7c1ec7fae4c03e5e69ed177abfa4808eac501140722189d3b3ab47b4f3022a5415ad32805cdd043a927d7a40a1232f439ec7b409595bd57e025f4b344a33fc6cea2b7dc19957aef1f98787df017fc188bcbcc4", 0x99, 0xa3f0}, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x90000001, 0xd}) 03:04:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x40000000fd, 0x2f}) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f00000000c0)=0x4) 03:04:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x64004801) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r2) 03:04:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000100)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x3f9, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x200480d0) 03:04:16 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xec, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x703}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4000898) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x25c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x710}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @local, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @loopback, 0xc5}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6fb2ee53}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "a519700229bbb73806b12639308371e913b19c87f030df5ce29d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "db4990cd85469e8e4c07adcb7ae80e93acc1e2c93f40a2fbe3"}}, @TIPC_NLA_NODE_ID={0x8, 0x3, "90419769"}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c1a11b3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x885}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040084) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x10040, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x400, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x32a00, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x20, 0x22, 0xc, 0x6, 0x3, 0x8, 0x5, 0xe4, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:16 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) getsockname(r2, &(0x7f0000000240)=@tipc, &(0x7f00000002c0)=0x80) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:16 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x1000, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x3f, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) 03:04:16 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x2) 03:04:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = gettid() sched_rr_get_interval(r1, &(0x7f0000000300)) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x3e9, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1, 0x0, 0x0, r1, 0x6, 0xffffff80, 0x3, 0xfff, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x38}}, 0x8040) 03:04:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x104, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3bf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x744}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8090}, 0x20000081) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x80, 0x9, &(0x7f0000000000)=0x174287d0}) 03:04:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7cf6ffff", @ANYRES16=r2, @ANYBLOB="020027bd7000fddbdf25020000000c00060001000000000000000c00030005000000000000000c000300010000000000000008000100000000000c00050001010000000000000c00060001000000000000000c00040008000000000000000c00020007000000000000000c0005000600000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x845}, 0x45) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x2) 03:04:16 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1e8, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "7b04d5cef1a3a02e69bdb2cf6554ab3d1e1d5d1cb8325691e2567e8f743cbd22900423cea86d497a3294812b93f4899e4f4a68d886105603a98c53d6cb3e5aa005ef670733b9304fa237d21bb7a3bd061b3804d3f4d77352108fffa50e8351cbe7116d722e822a550e5912f8c41a1a48bb6046dc27b7fadec3d42451a2b88bc662d8adb81713171bce0864c9fbce784ac40432ca22fbbbf1e2522bad5bbfcad35455de7ad4501b9f9a2760096b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb6, 0x3, "964cfd21fa3f49744c856b5c79b5d72538576e2ae5c2dbaf0e240052abdcdce001f5d96994e17d22402524e22b65c09d065c16e1e7d2c506cc1dd51872e32083c07e36ceaa43560cfa564f6e8f89260534502974b96d8e666fbe63638491a36f345aab94b79fe258840a47f40efd25c6653f93e2a40ef93f2b9d2c95cf23f7a8aa37b86b70f21c92c8aff3e2c333451e3bf232beef548af0201479220dc21fe7669f228a6a9bd83bd199daeae4edb19bb42a"}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:16 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) 03:04:16 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) getsockname(r2, &(0x7f0000000240)=@tipc, &(0x7f00000002c0)=0x80) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {0x8000, 0x1, 0xe1b, 0xfe}, 0x27, [0x56f7, 0x3, 0x8, 0x0, 0x5, 0x3d9, 0x80000001, 0x7, 0x80, 0x9, 0x2, 0x1, 0x81, 0x3, 0x401, 0x252, 0x9, 0x7fffffff, 0x1, 0x2, 0x1, 0x9, 0x5, 0x80, 0x2, 0x0, 0x9, 0x7ff, 0x7, 0x1, 0x10000000, 0x4, 0x1, 0xc222, 0x100, 0x5, 0x8001, 0x1, 0x1, 0xe9c5, 0x48, 0xffffffff, 0x0, 0x713, 0x1f, 0x5, 0x81, 0x5, 0x2, 0x5, 0x2, 0x7, 0x24, 0x1, 0xffffff5f, 0x5, 0x5, 0x0, 0xffff, 0x7, 0x3, 0x5, 0x5, 0xffff], [0x1, 0x101, 0x5, 0x37, 0x6, 0x6, 0x4c, 0xff, 0x0, 0x8001, 0x6, 0x5, 0x9, 0x4, 0x8, 0x1, 0x6, 0x4, 0x1e, 0xffffff81, 0xd47, 0xe9d, 0x7, 0x1, 0x3000000, 0x3, 0x1, 0x40, 0x7ff, 0x6fb, 0x4, 0x670, 0xb, 0x7, 0x0, 0x8, 0x0, 0x2, 0x5, 0x10000, 0x80, 0x2, 0x9, 0x61f, 0xffffffff, 0x31, 0x8, 0x2, 0xffa2524, 0x80, 0x6, 0x0, 0xc31f, 0x99, 0x2, 0x8000, 0x3a, 0x5, 0x8000, 0x15, 0x8, 0xfffffffc, 0x2, 0xc00000], [0x10001, 0x0, 0x3, 0x7, 0x9, 0x5, 0x4, 0x8001, 0x7, 0x1, 0x0, 0x1, 0x9, 0x1ff, 0x7, 0x7fffffff, 0x8, 0x6, 0x100, 0x9, 0x3, 0x7, 0x7, 0x2de4, 0x2f7cb8af, 0x3f, 0xe1, 0xfffffff9, 0x3, 0x6, 0x0, 0x9d, 0x0, 0x5, 0xfffffffa, 0x3f, 0x5, 0x3dc, 0x9, 0x3f, 0x37, 0x1, 0x4, 0x7, 0x2, 0x3, 0x7, 0xfffffff8, 0x20, 0x0, 0x3, 0x1, 0x5, 0xfffffff9, 0x7, 0x7, 0x9, 0x2, 0x1, 0xff, 0x0, 0x1, 0xbfd, 0x1], [0x7, 0x10000, 0x800, 0xfff, 0x7ff, 0x4, 0x1, 0x5, 0x8, 0x0, 0x4fa3, 0x7, 0x1, 0x7ff, 0x5a0a, 0x7, 0x41, 0xed8, 0x3f, 0x40, 0x7, 0x9, 0x9, 0x7, 0x7, 0xfffffffb, 0x10001, 0x7, 0x4, 0x6, 0x2, 0x5, 0x8001, 0x1f, 0x50439349, 0x6, 0x9, 0xfff, 0x1, 0x5, 0x4, 0x5, 0xb022, 0x3, 0x7, 0x4, 0x7fffffff, 0x11f, 0x8001, 0x0, 0x1eb0, 0x4, 0x100, 0xff, 0x85, 0x7, 0x5, 0x3b, 0x800, 0x1, 0x1, 0x3, 0xfffffff9, 0x2]}, 0x45c) 03:04:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x30000000, 0x2) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x80) 03:04:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xa759, 0x8, 0x1}) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000240)=0x51) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00', 0xffffffffffffffff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="000328bd7000fcdbdf25010000004400078008000100f56c81753be852028a9a3750f782d0c7fd02bfb064f805f7765e5c", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00050030000000000000000c00020006000000000000000c000800000400000000000008000100000000000c00060002000000000000000c00060001000000000000000800010000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x20c0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) socketpair(0x6, 0x3, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140), 0x4) inotify_init() ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x2) 03:04:16 executing program 4: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7c}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e76}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x905}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf1, 0x3, "f798d6267f88f0640dbd5687d85b84393967598ab160b65748631d42e00f7e9c89e1c60dd392baca9d11c6d97f2ee3d6e65fadb33a4593e57e7da08a4475bcdb8696c0b9f26b3ec159571931f2f14ff95d98af32cf0cc5d15d21cc2b3368cb2815e14a5e8b03b670ed5ff82a9ee063f3784213ee696a7cd4c8c11daf922c9ec698ae630bbc32acd3c133940eb8933a5fd44b952057a0c3b444141a11e6d3e6afbf8101c4e3768ae7c6011a3be1d8db34800ed40f1497abfffed7822499a37b247e2d6647651227e083447ddbe97c312de914494b6d602282f1759834dd39e4b94f203ae849796b1bc9bfc5d9a5"}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc01c}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x5}, 0x22040000) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x42, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x1, 0xf0}, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x12}) 03:04:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x288a22846c6629cd, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:16 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x800, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x8c080, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x97a}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00', r4) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x70bd26, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x2c}}, 0x40000) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x80000, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x80, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r7}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4040) 03:04:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000180)=0x80, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="fb1b5a394bf7970300000000000000e03627f79b", @ANYRES16=r4, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000014c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000200)={0x1274, r4, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb58}]}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @loopback, 0x48000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @private1, 0xb029}}}}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2f51003f}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x492}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NODE={0x1060, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "9d4b00d6e594c1a62d5e394d9c24c70b10dd153ab5a15fc5ca871b49d0a658e0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x75}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8284ef7}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x1274}, 0x1, 0x0, 0x0, 0x20004851}, 0x20000004) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) openat$vfio(0xffffffffffffff9c, &(0x7f0000001500)='/dev/vfio/vfio\x00', 0x0, 0x0) 03:04:16 executing program 3: socketpair(0x2a, 0x1, 0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4afffff4", @ANYRES16=r3, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x20008844) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', r2) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x19c, r7, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xaca}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa9000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb28}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff4d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff0a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x448}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe25}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x78, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2f2}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x9080}, 0x4048001) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:16 executing program 4: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r1) 03:04:16 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x440, 0x3f4, 0x100, 0x70bd26, 0x25dfdbff, {0x6, 0x1, 0x1d, [0x5, 0x2, 0x0, 0x800, 0x3, 0x7fffffff, 0x8001, 0x400, 0x3, 0x8, 0x80, 0x36, 0x6, 0x7, 0x0, 0xdf6a, 0x637, 0x4, 0x1b4, 0x3, 0x0, 0x80000001, 0x3d97, 0x5, 0x9, 0x69a3, 0x4, 0xb7, 0x4, 0x8, 0x2, 0x1, 0x6, 0x20, 0x200, 0x9, 0x1, 0x8, 0x20, 0x6, 0xc27, 0x7, 0x0, 0x5e65, 0x8001, 0x4, 0x0, 0x8, 0x80, 0x83000, 0x5, 0x2, 0x1, 0x3, 0x9, 0x7fff, 0x3ff, 0x7, 0x1ff, 0x3, 0x3ff, 0x4, 0x1, 0xdca], [0x6, 0x5, 0x0, 0xfff, 0x5, 0x80, 0x9, 0xfff, 0xa0, 0x3, 0xffffffff, 0x4, 0x3, 0x10001, 0x588, 0xffff8000, 0xcf, 0xe300, 0x1, 0x7, 0x5000, 0x90c, 0x80000001, 0x1, 0x4, 0x5, 0xfffffffa, 0x1, 0x9, 0x2, 0x0, 0x8, 0x9e, 0x8, 0x1, 0x9, 0x9, 0x0, 0x6e, 0x5, 0xda9, 0x10001, 0xffff, 0x7, 0x1, 0x6, 0x9, 0x48, 0x9, 0xff, 0x8, 0x200, 0x7f, 0x80, 0x2, 0x1, 0x5, 0x6, 0x3, 0x7ff, 0x7, 0x9, 0x4, 0x5], [0x0, 0x40, 0x5, 0x2, 0x8000, 0x6, 0x27, 0xc1, 0xe1, 0x7, 0x0, 0x5, 0x1ff, 0x8, 0x0, 0x0, 0x3, 0x400000, 0xfff, 0x2, 0x3f, 0x10001, 0x8000, 0x38, 0xd3b5, 0x5, 0x9, 0x1, 0x7, 0x4, 0x29000000, 0x4, 0x9, 0x3, 0xb5800000, 0xffffffff, 0x24, 0x80000001, 0x5, 0x2a, 0x81, 0x6, 0x8, 0x800, 0x34fcbbca, 0x10001, 0xfcf1, 0x400, 0x7ff, 0xd9e8, 0x1ff, 0x80000000, 0xfffffffc, 0x10001, 0x5, 0x6, 0x7, 0x2, 0x5, 0x4, 0x2, 0x4, 0x7fff, 0x3f], [0x1, 0x20, 0x0, 0x3e9, 0x30c7, 0x1a1, 0x0, 0xffff, 0x47db, 0x1, 0x1, 0x2, 0xbda, 0x3, 0x0, 0x5, 0x5, 0x3f, 0x0, 0x5, 0x6, 0x283, 0x3, 0xfff, 0xcf, 0x401, 0x10001, 0x3, 0x1ff, 0x4, 0x6, 0x8, 0x1, 0x0, 0x7f, 0x6, 0x1, 0x74, 0xfffffffa, 0x80000001, 0xfffffffa, 0x1, 0x80000000, 0x0, 0x9, 0x78dd, 0x1, 0x2, 0x200, 0x6, 0x0, 0x3, 0xffff, 0x19e2, 0x9, 0x5, 0x8, 0x1, 0x3, 0x5, 0x1ff, 0x3, 0x6, 0x8], 0x1e, ['/dev/ion\x00', '/dev/ion\x00', '/dev/ion\x00', ']\x00', '\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0xd}) 03:04:16 executing program 4: r0 = getpgid(0xffffffffffffffff) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x1a, 0x13, 0x6, 0x18, 0x5, 0x6, 0x5, 0xe, 0xffffffffffffffff}) getpgid(r0) 03:04:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x6a2fc0874399c2b9, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x1, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0xa0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) [ 1462.754940] nbd: must specify a device to reconfigure [ 1462.772480] nbd: must specify a device to reconfigure 03:04:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x40000000fd, 0x2f}) 03:04:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x2202c0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0x1, 0x1}) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0xa200, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="84030000", @ANYRES16=0x0, @ANYBLOB="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"/894], 0x384}, 0x1, 0x0, 0x0, 0x20008010}, 0xc800) 03:04:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000240)=0x80, 0x180000) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000280)=0xffff, &(0x7f00000002c0)=0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x1a, &(0x7f0000000300)="0e213c5a1abfbae1e185f7906cae17461ddfbfbb7654527b9e1be28958a43598f38ef5319cac3d359c7d192044f618344293e65e2a099606bee770710b76a6d34a3a548839fc394b43c7240014e530ed7f85f7df6877b43f907ae6282f0e", 0x5e) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x129}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004810}, 0x408f1a4253d312f) 03:04:17 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x3f, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00', 0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) socketpair(0x1d, 0xa, 0xffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)={0x0, 0x4, 0x9}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x250f}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44011}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r8 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@migrate={0x108, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@multicast1, @in6=@private0, 0x4e22, 0x0, 0x4e24, 0xef19, 0xa, 0x20, 0x80, 0x32, 0x0, r8}, 0x6e6bbe, 0x2}, [@algo_aead={0xaa, 0x12, {{'morus1280-avx2\x00'}, 0x2f0, 0x100, "08b76082d7bbde38943257db70ea4b614f28016b055a0c1ea0713cc4c70dbdfd118eb7b97a48202c7dfeb1d287098676108630a7e89625f0834309c8d393a51abd276a2ecc92a4fd64d94634ec59c8c020d76bb283308082a6d9d55e9f2d"}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 03:04:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x0, {0x0, 0x0, 0xffbfffff}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8140, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x22, 0x11}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xd6000, 0x0) 03:04:17 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x4, 0xa}) 03:04:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000881) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:17 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d4, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56a1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x833}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9da}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40}, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x20008002}, 0x40810) 03:04:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x7, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0x29, 0x1f, 0x9, 0x19, 0x9, 0x271, 0x40, 0xf2}) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:17 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x8, 0x70bd27, 0x25dfdbfc, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40880}, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000f70300042bbd7000fcdbdf2507000000feffffffffffffff7865302e2f66695965300000a36443c447818d718415839d0655163978d5e9c247759a837dc5513832bf8bc2bc4a73ecc1b0946a808c8b4ad7c780baa5df87ac58a2ec57245906d312e0c6238dd65c3486869e8948c9db88789331e7cad81675dc4dc19043e82d8bc800"/146], 0x28}}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, r1, 0xe188c5ca8932b149, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4854}, 0x80) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0128bd7000fbdbdf251100000068000180380004001400010002004e207f0000010000000000000000200002000a004e2400008000fc000000000000000000000000000000faffffff2c0004001400010002004e23ac14ffbb00000000000000001400020002004e23e00000020000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) 03:04:17 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00'}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000840)=""/163, 0xa3}, {&(0x7f0000000900)=""/123, 0x7b}, {&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/96, 0x60}, {&(0x7f0000000b40)=""/155, 0x9b}], 0x6, &(0x7f0000000c80)=""/251, 0xfb}, 0x10012) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00)='TIPCv2\x00', 0xffffffffffffffff) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x4, 0x16}) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x48, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7564}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x103606) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) 03:04:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x602943, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7a9, 0x26, 0x1}) 03:04:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0xd}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180)={0x25, 0x8}, 0x2) 03:04:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x200082, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:17 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) 03:04:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x4, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000380)={0x594, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}]}, @TIPC_NLA_NODE={0x1bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x15b}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x38, 0x3, "e9920636cb4573f8d62665152a3749bc4e2706f4d4cd239dc7e1643e7af1427a7fb43e773dc6ecd997ab5d144c9c028c1e0016c1"}, @TIPC_NLA_NODE_ID={0xa2, 0x3, "9a4d34a4e63fae645496492f98b6aee2867c3ed09d5c3cd0dbd6c97b4a3eb3a5820505498ab113a42455a6f272c585a87cf72e65e1fd78ed773276557e602515c81501cde928e882f03d1eb6f8587b12f5b8e3fe8a3b33d87c2a81060f799a40353161cb817e9e952e22500693c7ad67e74aa74bef67a677b2122b08a6e9dbd035c044345942e0a5dfd53ea16bb04367601dd0e043864b91b980347c12b7"}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "1c0b0a19aaa3fc1d80804d709b8be52b76955abcb0bd19b1916601f83ca21fa9777b420fe3ebc793239be99edfb4a14f3d598f83c7a229094ac50fa7bba29cfd5436d59b8e07f0cc6533c511877698ff4e350aebc6132875e5a3384c49d188336124f35ea18229d96595c1920d82549507c2cd0153691899db97faa1b9d5919c6c48f62de42f972948306fd102c3d432f2992902eb0de2fe2acdba031146032f2d335b6104c160bfed611598f5c0cca182548cdfec295224f0938fd68304ec"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x88}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1fb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x458}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8ae}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010101}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x21c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "0c313abf6d74ae320d4a8dcf3482d5402fece45e41d2612b05b5f5c3"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "a4c773fd725d6caecc24dbd71c75008fddcefe032bf039"}}, @TIPC_NLA_NODE_ID={0x66, 0x3, "bc2722c5ca5586d7cb3752e242715b5556df9bee03f2e99e22769e8884cd9f80ea82ffe6264b315e1815cbbfa02bc03ce05d7eb68681357b66c71ef27fb138b3a86ed020271e83ecf10d02319714e404b5ec4c80b3278fc6fdd526781ef1665ebc72"}, @TIPC_NLA_NODE_ID={0x9, 0x3, "d5b6cae44d"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "d36b1241dbe06d99df0f85206aef742cdabbc1d44e6e072069a790080bf8e46198dc"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0xbc, 0x3, "558fb8201d895a2973b290682888bc94a647e2fef48357b2133a3d731d885ec9836a2cf81961e64035f613f9bfb6fc425e4dbfb2af8ab6f94d2fc84f9dc31615db779c313b868d9cf4ef7a59064b29017126bd609ee70121b5688c21d903f68436fc0d24222e80b887ae162a6906ec24784738802ea8d6cda451649cb049e1ad9abb0eb96dec93ac5abd9c90f82257adb00e2d4d870fdcedac9335ebe59ac712bf681ae3bce3b76966d692e3a094e28067999aebb59f6ac0"}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x594}, 0x1, 0x0, 0x0, 0x881}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000300)={0x3, 0x31}) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xcc, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x921e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba07}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80a1}, 0xc010) 03:04:17 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffffc, 0x10000, 0x3, 0x2}, 0x0, &(0x7f0000000040)={0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8f2, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x80, 0x0, 0x4, 0x8, 0x200, {0x77359400}, {0x3, 0x0, 0x0, 0xe0, 0xfc, 0x1, "c968105c"}, 0x9, 0x3, @offset=0x3f, 0x400}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:17 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x480481, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xbb5, 0x2, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00', 0xffffffffffffffff) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x84000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x4) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x8da, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x7, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1, 0x3, 0x7fff}, &(0x7f0000000280)=0x92, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x1e}}, 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20004040) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x50000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140), 0x2) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000280)=ANY=[]) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x15, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x4040001) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x3fb}, 0x0, &(0x7f0000000100)={0x8553, 0x0, 0x2, 0xfffffffffffffffd}, &(0x7f00000001c0)={0x0, 0x989680}, 0x0) 03:04:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x4000000101, 0x1a}) 03:04:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x9, 0x4, &(0x7f0000000040)=0x1}) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x200, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000240)={0x0, 0x600, 0x3, &(0x7f0000000200)=0x4}) 03:04:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x200000, 0x0) 03:04:17 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x1}) 03:04:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x20000, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000080)={0xb4, 0x0, 0x0, 0x9, "1365eebfa6d7e805e4dc23f87c5a8afb6a38033c8d6cf3acdb12e11759e19b981e834ab650adc566d914506004e7c8071947faf7f4b54e0dceece8b7710e65ba46345eca3af7db4b36d859f85127bb96c13e9d23831e176c257e42d48d14fc51455968f3250ea7551801afef09a72cd7bcd61aaa3f8ce58d2fe782aa4a625190acee521bd48267116dfcbecb54bb2f7302532dc350923ccd5eb27f55"}) 03:04:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xe8, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100)=0x94, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x24, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x1e7a00, 0x0) 03:04:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f4, 0x0, 0xc00, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9be}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, [], 0x27}, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x109, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private1, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xa203, @mcast1, 0x4}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x102}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4000814) 03:04:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x62cbc3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) socket$nl_xfrm(0x10, 0x3, 0x6) 03:04:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80080, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe4, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fd5fc05598745f52774866737d55d24361448655"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6e52413d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x223b}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 03:04:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x12c, r3, 0x300, 0x70bd2d, 0x2, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0xa2c14df2abdc49d}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40000000) 03:04:17 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) socketpair(0x11, 0x1, 0x4294, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x281, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x40000000fd, 0x2f}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24098fb5}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040}, 0x44005) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:17 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x17, 0x32, 0x3, 0x4, 0xa, 0x4, 0x2, 0xee}}) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) socket$isdn(0x22, 0x3, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0xa102, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', r2) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x60000000) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:18 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}}, 0x4001) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:19 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x47f2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:19 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x4e080, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x30}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x10, 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000380), 0x4, {0xa, 0x4e21, 0x625, @local, 0xec7}, r4}}, 0x38) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00', r2) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010026bd700000000000030000000c00040000000000000000000c0004000000000000000000"], 0x2c}}, 0x40000) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r5, 0xc, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x181}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0xc615adf7e86daae9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x40010) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video0\x00', 0x2, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3fb, 0x800, 0x70bd29, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4090}, 0x40000) 03:04:19 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0xffffffffffffff80, 0x0, 0x18, 0x0, 0x0, 0x400000, 0x44000000000, 0x6}, 0x0, &(0x7f0000000100)={0x40, 0x0, 0x4, 0xffffffffffffff37, 0x0, 0xfffffffffffffffd, 0x1, 0x40}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0xe, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x240, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x101000, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x7f) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000300)={0x13, 0x1d, 0x14, 0x1d, 0x3, 0xf32, 0x4, 0x43, 0x1}) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000140)={0xd6, 0x1, 0x7, 0x3ff, "880351e13bfd7a878a501f7b6eb5653d28d72b89ba24729639b02c6095c03ca0bae068621ddabae671aae99a1ad6d2e61bfe88139d0441aa5714d52c8b6887c30add384a2634c8a1eea478b46b66753dc07c7e5a8761c2044a8cb20697f67a4df343200de555b981c2fdee72d151abadc3ba623df53606bd5ea67d1251258f227d65c35ab9673afbd1096407e08cbe2137872c0bf26824d60d95ebd4dfd8b4d50b254f4116cee281083213252a47ccff658851b974c4560dce494b96b377"}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x1) 03:04:19 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00', 0xffffffffffffffff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x3e0, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x35, 0x3, "d1fcf1a745a49a6acbc1132f97cc01f6d876514a52e353d4b57b87c0864b002d2b53d43b36ea072b9338c9ddd9aa4b50b4"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xc2, 0x3, "45fe9c7336a18fc399252cd726178cc3c3ff5a5e762d7ce10321892bad801be36cf3e43cc9327938b15df315d6b747611a936d910cdf14c3782a2857fc6aedacfc9bf0b4335218fe0c93d32154a43df5176ac59a636c467f737fbc030ee1ad8a0a2920cca35c6d66c3d740bbe4ec37260c51b36875faa765315923ac73c99427989c4b295815c86442fcd1cdd303380c7eb9703d1f0b7fe85afcceac62e00010e6c93429b0564f6596de1ecf5b5dca103ebd9e910b20f989b5c9e8b1f972"}, @TIPC_NLA_NODE_ID={0x2b, 0x3, "8db7856cc43428285f35b61188912a5ce4d664905c2f4298f0d0e8668cc11eee2e0acd77ee8433"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000240)={0x90000001, 0xd, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x6) 03:04:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x188, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a56}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x952028ba}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8100000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ccdf28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @local, 0x8001}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10001, @private0={0xfc, 0x0, [], 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x804}, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000100000001, 0x3f}) 03:04:19 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:19 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40040, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x400, 0x70bd2d, 0x4, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "1ed21e3bf18935b435e11374bb994a2609f783aa6fdab7d159f40bf66a82b8896c76f2"}}, @TIPC_NLA_NODE_ID={0x36, 0x3, "c037cc3294daec05a215550f59527b6cce9fe6298956f996bffbc004466adc0b4c971af1521e3e12f2a9bfc5d2e41e534aa7"}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6b43}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004000) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x2, 0x4, 0x1}) 03:04:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x228, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4d02231e}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffc0}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x891}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010) 03:04:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=0x9, 0x4) 03:04:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6}, 0x8) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x110, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014080}, 0x44) 03:04:19 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:19 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8c5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x210201, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00', r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1040005}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf4, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0001}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9e89}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xf4}}, 0x283133f2c6ff7417) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x29}) 03:04:19 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x1, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x6) 03:04:19 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x106, 0x1, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x2) 03:04:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x432382, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1044, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x1044}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001200)='team\x00', r1) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:19 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:19 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESOCT=r1, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32], 0x2e8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r6, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r7], 0x2e8}}, 0x2000c004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x98, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x9, 0x3, 0x81, 0x5}, {0x7, 0x26, 0x2, 0x6}, {0x8, 0x5, 0x6}, {0xb62e, 0xff, 0xc1, 0x8c8}, {0x8000, 0x81, 0x3, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x791}}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008010) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r10], 0x2e8}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0010000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="7efd07000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=r10, @ANYBLOB="2b000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004003f0000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x840}, 0x10) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) 03:04:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x40, &(0x7f0000000100)=0x1) 03:04:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00', r3) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd26, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x2c}}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x77b}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00', r2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:19 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0x0, 0x9c5}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x4100, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:19 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) [ 1465.656245] nla_parse: 16 callbacks suppressed [ 1465.656252] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1465.688272] nbd: must specify a device to reconfigure 03:04:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f4, 0x0, 0xc00, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9be}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, [], 0x27}, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x109, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private1, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xa203, @mcast1, 0x4}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x102}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4000814) 03:04:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000040)={0xfffffffc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x2}) 03:04:19 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:19 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40001, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0x5, 0x0, 0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x8040, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x9, 0x20}) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f6, 0x300, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x10) [ 1465.710855] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1465.733217] nbd: must specify a device to reconfigure 03:04:19 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x17, 0x32, 0x3, 0x4, 0xa, 0x4, 0x2, 0xee}}) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:20 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x400, 0x3, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x2) 03:04:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc0000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff69f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x158, r5, 0x990, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x144, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @empty, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1f, @rand_addr=' \x01\x00', 0xa9ea}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, [], 0x1}, 0xff}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000480)={0x1, 0x6}, 0x2) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:20 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80080, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe4, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fd5fc05598745f52774866737d55d24361448655"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6e52413d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x223b}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 03:04:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x17, 0x32, 0x3, 0x4, 0xa, 0x4, 0x2, 0xee}}) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:20 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f4, 0x0, 0xc00, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9be}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, [], 0x27}, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x109, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private1, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xa203, @mcast1, 0x4}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x102}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4000814) 03:04:20 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x1080, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000140)=0x3ff, 0x4) 03:04:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000180)=@rc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/178, 0xb2}, {&(0x7f00000002c0)=""/170, 0xaa}], 0x2, &(0x7f0000000380)=""/242, 0xf2}, 0x40000121) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1d0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0x19}}}, {0x20, 0x2, @in6={0xa, 0x1b1d, 0xffff, @private2, 0xaa}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x823}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb4a}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2000000}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbfac6e8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_destroy(r3) 03:04:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf250e000000240004801300010062726f6164636173742d6c696e6b00000900010073797a3100000000440004801300010062726f0b35000000000000696e6b00000900010073797a31000000001300010062726f6164636173742d6c696e6b00000c0007800800040003000000a80006804c00040067636d2861657329000000000000000000000000000000000000000000000000240000000f502b1dcdab1bd1663dc751028c1319f06fb07ba54ab3b4d3f23b4b878a096fc1aa3cef040002003d00040067636d2861657329000000000000000000000000000000000000000000000000150000007ccd5ea8d714c76c5e6f6573307ac0e7fbd736eed1000000080001001104000004000200080001008000000014000180100001006574683a6272696467653000"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x17, 0x32, 0x3, 0x4, 0xa, 0x4, 0x2, 0xee}}) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xe8, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:20 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x17, 0x32, 0x3, 0x4, 0xa, 0x4, 0x2, 0xee}}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x131000, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:20 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, 0x0, 0x0) 03:04:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x200000, 0x0) 03:04:20 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000040)=0x80000000) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:21 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f4, 0x0, 0xc00, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9be}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, [], 0x27}, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x109, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private1, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xa203, @mcast1, 0x4}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x102}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4000814) 03:04:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x113800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000100)) 03:04:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x17, 0x32, 0x3, 0x4, 0xa, 0x4, 0x2, 0xee}}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:21 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) 03:04:21 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, 0x0, 0x0) 03:04:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x17, 0x32, 0x3, 0x4, 0xa, 0x4, 0x2, 0xee}}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x1c9cc0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x2a4, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdf9d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa91a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa37}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x524a}]}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff3fe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x14000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x323d, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @remote, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x896}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9fec}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x133}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff3b5}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004) getsockname$packet(0xffffffffffffffff, &(0x7f00000028c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002900)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r5, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r6], 0x2e8}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r9, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r10], 0x2e8}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000029c0)={'ip6_vti0\x00', &(0x7f0000002940)={'sit0\x00', 0x0, 0x4, 0x9, 0xff, 0xfffffffc, 0x40, @private2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10, 0x10, 0x3, 0x40}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002a00)=ANY=[@ANYBLOB="fc020000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="580202803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007f0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c05010024000100757365725f6c690b510619d79a95ac0000000080000000800400040008000600003ce1f10600"/56, @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000700000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040038000000080007000000000008000100", @ANYRES32=r10, @ANYBLOB="8000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB], 0x2fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r12, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f8, 0x400, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) [ 1467.816245] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1467.829729] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1467.859824] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1467.886497] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:22 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f4, 0x0, 0xc00, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9be}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, [], 0x27}, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x109, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private1, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xa203, @mcast1, 0x4}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x17, 0x32, 0x3, 0x4, 0xa, 0x4, 0x2, 0xee}}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:22 executing program 1: pselect6(0x40, &(0x7f0000000100)={0x1, 0x5, 0x5, 0x2, 0x0, 0x8, 0x4, 0x5}, &(0x7f0000000140)={0x9, 0x3, 0x7, 0x2, 0x6, 0xec, 0x3f, 0x7}, &(0x7f0000000180)={0xffffffffffffffff, 0x2, 0x9, 0x80, 0x20000000, 0x7ff, 0x7, 0x5}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x5]}, 0x8}) pselect6(0x40, &(0x7f00000002c0)={0x200, 0x5, 0x3, 0xd05, 0x2, 0x100000000, 0x9, 0x3}, &(0x7f0000000300)={0xf76, 0x1, 0x200, 0x8, 0xf009, 0x0, 0xfffffffffffffffe, 0x400}, &(0x7f0000000340)={0x10001, 0xfffffffffffffff8, 0x3, 0x20, 0x7f, 0xfffffffffffffffb, 0x7f, 0x1}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x800]}, 0x8}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) socket$isdn(0x22, 0x3, 0x1) r2 = socket$isdn(0x22, 0x3, 0x22) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000440), 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000280)) 03:04:22 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r3, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r4], 0x2e8}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00', r5) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf250e000000240004801300010062726f6164636173742d6c696e6b00000900010073797a3100000000440004801300010062726f0b35000000000000696e6b00000900010073797a31000000001300010062726f6164636173742d6c696e6b00000c0007800800040003000000a80006804c00040067636d2861657329000000000000000000000000000000000000000000000000240000000f502b1dcdab1bd1663dc751028c1319f06fb07ba54ab3b4d3f23b4b878a096fc1aa3cef040002003d00040067636d2861657329000000000000000000000000000000000000000000000000150000007ccd5ea8d714c76c5e6f6573307ac0e7fbd736eed1000000080001001104000004000200080001008000000014000180100001006574683a6272696467653000"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:22 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, 0x0, 0x0) 03:04:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0x4, 0x1}) timer_create(0x0, 0x0, &(0x7f0000000240)) timer_gettime(0x0, &(0x7f0000000280)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) [ 1468.550279] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x90, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, [], 0x1}, 0x9b}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000001, @empty, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40804}, 0x42040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000480)={0x0, 0x4, 0x4, &(0x7f0000000440)=0x10000}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00', r2) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r4, 0x100, 0x2, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x311}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4c011}, 0x4010) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000}, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) [ 1468.622585] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:23 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f4, 0x0, 0xc00, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9be}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, [], 0x27}, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x109, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private1, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xa203, @mcast1, 0x4}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:23 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$RTC_WIE_ON(r2, 0x700f) 03:04:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:23 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/dlm-monitor\x00', 0x40000, 0x0) getsockname(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x2, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004010}, 0x84) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) 03:04:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000180)=@rc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/178, 0xb2}, {&(0x7f00000002c0)=""/170, 0xaa}], 0x2, &(0x7f0000000380)=""/242, 0xf2}, 0x40000121) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1d0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0x19}}}, {0x20, 0x2, @in6={0xa, 0x1b1d, 0xffff, @private2, 0xaa}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x823}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb4a}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2000000}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbfac6e8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_destroy(r3) 03:04:23 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80)='TIPCv2\x00', r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x24c, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfce3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x32}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff08c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xc0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x3, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x6, 0x2}, 0x0, 0x0, &(0x7f0000000640)={0x5, 0x9, 0xfffffff9, 0x809c}, &(0x7f0000000680)=0xaf6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x7}}, 0x10) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {0x2, 0x9, 0x8, 0x6}, 0x39, [0x400, 0x5, 0xb8d, 0x251c1bfc, 0x100, 0xec68, 0x6, 0x5, 0x6, 0xa9, 0x6, 0x2, 0x4, 0x8000, 0x1ff, 0xf9, 0x9, 0x1000, 0xa8b, 0x0, 0x8, 0x5, 0x2, 0x0, 0x633, 0x2, 0x6164, 0xfffffff9, 0xb8, 0x3, 0x3, 0x9, 0x11a5ef7, 0x25, 0xf5, 0x5, 0x8, 0x2, 0x266, 0xfffffff7, 0xfffffffa, 0x8000, 0x5, 0x8, 0x6, 0x6, 0x3, 0x45, 0x7, 0xffff0001, 0x7, 0xfff, 0x97, 0x3, 0x4486, 0x3, 0xe321, 0x1, 0xffffffff, 0x8000, 0x7, 0x3f, 0x6, 0x5], [0x0, 0x4, 0x73855d66, 0x5, 0x80000000, 0xa00000, 0xfff, 0xe1e, 0x7ff, 0x5, 0x6, 0x9, 0x200, 0x1f, 0x2, 0x6, 0x213, 0xffff8b83, 0x4, 0xff9, 0x8, 0xe02, 0x9, 0x6, 0x0, 0x50, 0xc6bd, 0x8, 0x4, 0x80000000, 0x4, 0x0, 0x81, 0x2, 0x6, 0x80, 0xfffffffc, 0x6b, 0x1400000, 0x3, 0x8, 0x3f, 0xfd, 0x0, 0x1ff, 0xc, 0x430, 0x1a, 0xcad, 0x1, 0x0, 0x10001, 0x5, 0xe6, 0x1, 0x12b, 0x1, 0x10001, 0x4, 0x8, 0x5, 0x1000, 0x1f2b, 0x7], [0x3, 0x4737, 0xffffffff, 0x14, 0xffff, 0x7, 0xffffa5a4, 0x55, 0x5, 0x0, 0x2, 0x1, 0x7fff, 0x6, 0x5c7a, 0x1f, 0x0, 0x5, 0x3, 0x8, 0x1f, 0x9, 0x973, 0x4, 0x7, 0x80000, 0x3f, 0x8, 0x1, 0x25, 0xa42, 0x1, 0xffffffff, 0x200, 0x2, 0x53d75852, 0x5, 0x7fffffff, 0x3ff, 0xffffffff, 0xcaab, 0x27, 0x1, 0x9, 0x7fffffff, 0xf6ce, 0x9cb, 0x6, 0x81, 0x40, 0x1ff, 0x6, 0x2, 0x0, 0x7, 0x2, 0x1, 0x400, 0x800, 0x401, 0x1, 0x2e7, 0x10001, 0x3], [0x80, 0x90, 0x40, 0x4, 0x81, 0x3ff, 0x0, 0x0, 0x8, 0x1cc, 0x7, 0x8, 0x7fffffff, 0xffff, 0x76, 0x2, 0x3, 0x6, 0x1, 0x49, 0x4, 0x1, 0xeb22, 0xffff, 0x1, 0x9, 0x1, 0x7, 0x8c, 0x401, 0x935ae3d4, 0x63f8, 0x1f, 0x7, 0x9, 0x7174809f, 0xf78c, 0x1f, 0xff, 0x7ff, 0x8, 0x7, 0x895, 0xfffffff7, 0x7, 0x8, 0x5, 0x0, 0x17a0, 0x0, 0x0, 0x100000, 0x4, 0xd8, 0x1, 0x8, 0xffff, 0x20, 0x6, 0xffffff29, 0x800, 0x6, 0x2, 0xd8e]}, 0x45c) 03:04:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:23 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r1 = getpgid(0xffffffffffffffff) write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:23 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:24 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x480481, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xbb5, 0x2, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00', 0xffffffffffffffff) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x84000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x4) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x8da, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x7, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1, 0x3, 0x7fff}, &(0x7f0000000280)=0x92, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x1e}}, 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20004040) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x50000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:24 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00', r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xb4, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8004}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x4, 0x9, 0x1, 0x7}]}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 03:04:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:24 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x106, 0x4, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x10000, 0x0) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f8, 0x100, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8004}, 0x4008000) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32], 0x2e8}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r5, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r6], 0x2e8}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r9, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r10], 0x2e8}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000600)={0x2dc, 0x0, 0x310, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x0, 0x5, 0x5, 0x1f}, {0x400, 0x7b, 0x9}, {0xfbc9, 0x1f, 0x1, 0xffff0000}, {0xff, 0x7c, 0x1f, 0x811c}, {0x8, 0x0, 0x8, 0x7ff}, {0x3f, 0x1, 0x3, 0xfffffffc}, {0x6, 0x6, 0x6, 0x8}]}}}]}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x1}, 0x8401) r11 = socket$isdn(0x22, 0x3, 0x25) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x1, r11, &(0x7f00000000c0)="3a24ef6ae3889e6708cb1b04fc30c8955c792c747009100aafc229d89711601a49edf06243e33f4cacbb9231abeb2b1cee2d37f814", 0x35, 0x80000000, 0x0, 0x2}, &(0x7f0000000180)) 03:04:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3801005f00", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10040840}, 0x488d4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f4, 0x0, 0xc00, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9be}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, [], 0x27}, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x109, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private1, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xa203, @mcast1, 0x4}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:24 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:24 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) [ 1470.397169] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1470.421455] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.1'. 03:04:24 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:24 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) [ 1471.266178] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1471.279285] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1471.284416] CPU: 0 PID: 12700 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 1471.292325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1471.301701] Call Trace: [ 1471.304303] dump_stack+0x1b2/0x281 [ 1471.307939] warn_alloc.cold+0x96/0x1cc [ 1471.312087] ? zone_watermark_ok_safe+0x220/0x220 [ 1471.316941] __alloc_pages_nodemask+0x2127/0x2720 [ 1471.321781] ? __schedule+0x893/0x1de0 [ 1471.325670] ? lock_acquire+0x170/0x3f0 [ 1471.329660] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1471.334507] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1471.339956] ? __mutex_unlock_slowpath+0x75/0x770 [ 1471.344800] alloc_pages_current+0x155/0x260 [ 1471.349215] ion_page_pool_alloc+0x118/0x1b0 [ 1471.353624] ion_system_heap_allocate+0x133/0x8c0 [ 1471.358469] ? ion_alloc+0x187/0x810 [ 1471.362186] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1471.367645] ? ion_system_contig_heap_create+0x130/0x130 [ 1471.373099] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1471.378117] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1471.382973] ion_alloc+0x204/0x810 [ 1471.386540] ? ion_dma_buf_release+0x40/0x40 [ 1471.390956] ? __might_fault+0x177/0x1b0 [ 1471.395034] ion_ioctl+0xea/0x1f0 [ 1471.398494] ? ion_query_heaps+0x360/0x360 [ 1471.402741] ? ion_query_heaps+0x360/0x360 [ 1471.406983] do_vfs_ioctl+0x75a/0xff0 [ 1471.410785] ? ioctl_preallocate+0x1a0/0x1a0 [ 1471.415193] ? lock_downgrade+0x740/0x740 [ 1471.419342] ? __fget+0x225/0x360 [ 1471.422799] ? do_vfs_ioctl+0xff0/0xff0 [ 1471.426776] ? security_file_ioctl+0x83/0xb0 [ 1471.431182] SyS_ioctl+0x7f/0xb0 [ 1471.434545] ? do_vfs_ioctl+0xff0/0xff0 [ 1471.438533] do_syscall_64+0x1d5/0x640 [ 1471.442424] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1471.447619] RIP: 0033:0x465f69 [ 1471.450821] RSP: 002b:00007f9a160a9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1471.458524] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1471.465795] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1471.473092] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1471.480377] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1471.490199] R13: 00007ffd4863bc0f R14: 00007f9a160a9300 R15: 0000000000022000 [ 1471.508796] Mem-Info: [ 1471.511384] active_anon:10815 inactive_anon:6740 isolated_anon:24 [ 1471.511384] active_file:6710 inactive_file:5290 isolated_file:0 [ 1471.511384] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1471.511384] slab_reclaimable:21996 slab_unreclaimable:105497 [ 1471.511384] mapped:61706 shmem:6931 pagetables:740 bounce:0 [ 1471.511384] free:84977 free_pcp:43 free_cma:0 [ 1471.563907] Node 0 active_anon:43260kB inactive_anon:26960kB active_file:26840kB inactive_file:21152kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:246824kB dirty:100kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1471.597058] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1471.659121] Node 0 DMA free:11148kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1471.692544] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1471.698611] Node 0 DMA32 free:150712kB min:36200kB low:45248kB high:54296kB active_anon:43260kB inactive_anon:26960kB active_file:27340kB inactive_file:21552kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2960kB bounce:0kB free_pcp:644kB local_pcp:644kB free_cma:0kB [ 1471.733044] lowmem_reserve[]: 0 0 0 0 0 [ 1471.737477] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1471.767372] lowmem_reserve[]: 0 0 0 0 0 [ 1471.771538] Node 1 Normal free:474668kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1471.802744] lowmem_reserve[]: 0 0 0 0 0 [ 1471.807158] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 2*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11148kB [ 1471.824962] Node 0 DMA32: 3448*4kB (UE) 647*8kB (UME) 2748*16kB (UME) 2720*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 149976kB [ 1471.842700] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1471.854044] Node 1 Normal: 77*4kB (U) 419*8kB (U) 278*16kB (U) 88*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 67*2048kB (U) 37*4096kB (U) = 301676kB [ 1471.873508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.883603] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1471.895888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.905204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1471.922182] 15970 total pagecache pages [ 1471.926315] 0 pages in swap cache [ 1471.930177] Swap cache stats: add 0, delete 0, find 0/0 [ 1471.935633] Free swap = 0kB [ 1471.942863] Total swap = 0kB [ 1471.945965] 2097051 pages RAM [ 1471.949668] 0 pages HighMem/MovableOnly [ 1471.953729] 363840 pages reserved [ 1471.957661] 0 pages cma reserved 03:04:26 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:26 executing program 1: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x0, 0xbd7, 0x4, @private2={0xfc, 0x2, [], 0x1}, @local, 0x40, 0x700, 0x8000, 0x3ff}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r3, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r4], 0x2e8}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x114, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x54}, 0x4004095) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) 03:04:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:26 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="54010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32], 0x2e8}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x3, 0x1, 0x11, @private1={0xfc, 0x1, [], 0x1}, @private1, 0x20, 0x700, 0xd7fd, 0xb3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r4, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r5], 0x2e8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f80201009e7a8a0ebda350cb5284b3bdf04cc8de59d7b16ae558a1d73738e3535d85a1aa69282236f88f304e4f6c0fa1eb42731c67e33832e38b18d49d5d03e80678885b3877074c9baa18e721c3239bf2da84238e1053bfe9266c91946010866cd8e119e90a1cfff720e43cb8dac4b43d6514139132ca25499cc3c3c3b2a680586dbe6a9a8429f8cb9d63aaf3c0604b64e438c327337af3a01b4d74b61ac125ea2d67d3a7b7229628c3af1f96b65d8553f284c424cd9ace5a69aa7b7f981a7535024aff736671f1f7e6b437f5f4ce086989496a239ef382648b35df574e32f6aa5d338cb6115cc6", @ANYRES16=r9, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r10], 0x2e8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000000f40)={&(0x7f0000000180), 0xc, &(0x7f0000000f00)={&(0x7f0000000700)={0x7f4, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x9, 0x1, 0x2, 0xfff}, {0x4, 0x5, 0x1, 0x400}]}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x401, 0x98, 0xff, 0xe0000}, {0x5, 0x81, 0xe6, 0xffffffff}, {0x5, 0x62, 0x4, 0x4}, {0x200, 0x3, 0xfd, 0x32}, {0x1, 0x7f, 0x1, 0x8}, {0x6, 0x81, 0xff, 0x2}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x6000, 0x5, 0x21}, {0x1ff, 0x2, 0x0, 0x6}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x6, 0x9, 0xfa, 0x7}, {0x5, 0x81, 0x5, 0x8}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffffff51}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0xfbff, 0x9, 0x7f, 0xda0}, {0xae0a, 0x81, 0x4, 0x6}, {0x0, 0x0, 0x0, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x5, 0x6, 0x4, 0x7ff}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x7f4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f4, 0x0, 0xc00, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9be}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, [], 0x27}, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x109, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private1, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xa203, @mcast1, 0x4}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:26 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:27 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:27 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) [ 1472.823469] nla_parse: 2 callbacks suppressed [ 1472.823475] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1472.862320] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:27 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:27 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) [ 1472.891503] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.1'. 03:04:27 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:27 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:27 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0x800, 0x800000000}, 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0x0, 0x0, 0x85}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x2) [ 1472.951977] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:27 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x40000, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:27 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:27 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x0, 0xbd7, 0x4, @private2={0xfc, 0x2, [], 0x1}, @local, 0x40, 0x700, 0x8000, 0x3ff}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r3, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r4], 0x2e8}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x114, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x54}, 0x4004095) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) 03:04:27 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000002700)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2c, 0x1, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00', r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd3d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc3}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd67}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd893}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8c4}, 0x4004000) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r6, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r7], 0x2e8}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r7}}}]}}]}, 0x60}}, 0x80fba92a1a08db1c) pselect6(0x40, &(0x7f0000000000)={0x4, 0x2, 0x0, 0x40000000, 0x0, 0x800000000000, 0x3}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x210000, 0x0) ioctl$RTC_RD_TIME(r8, 0x80247009, &(0x7f0000000300)) 03:04:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:27 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:27 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:27 executing program 1: bind$isdn(0xffffffffffffffff, &(0x7f0000001800)={0x22, 0xff, 0x8, 0x8, 0x3}, 0x6) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001780)={&(0x7f0000000180)={0x15e0, r2, 0x102, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x284}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2296}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xaf}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x364}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "3ccad16128da75e1533f40e361c07e2f265a09844c4f"}}, @TIPC_NLA_NODE_ID={0x7c, 0x3, "19cacd9c3892d3a07fe1edcdb3f5e92e9acc7ac075db1fa804d698bd62645b4cc14cf8a9842f90742f32e50b81bdf1d606025b383976e2c7305c8a6a7dfa525ca7c18fa008328cbc26a8d723837ceb2a76f89cbc4203c5eb596365f5d82bd582149f172be253896e14da7224231c89e7d79a6606814357c4"}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb25}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "fbdb3bbeabbf65bf8f6ea8e9e15e77b511e43fbe4dfcef39c45c2d3172185f"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "de52f3ee3be95a3f6c4370024ee6b6e7913ee83aabee3eee2eb6c976bd92cbacbf"}}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffeff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3e, 0x3, "0c6200702053a2e3a0a09b01610f4853c0bcb6ede0692cd81dfe2d3e5a0f4b3b133c9fd172a18529259fd8e1b97c84ee2fb3d17690fb5f6beceb"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bdbf39fe018655f8d2104c7d0eef5450fd288bce9cffe1f34ae8f0453a08d17480"}}, @TIPC_NLA_NODE_ID={0xe2, 0x3, "68ec7889c02c78ea66f28308955000a382877ec65d4aa40fa594a2972802667eb538f081e70f4beb0b6e7d9cf7475625a977e4ddad79476a21ae6e87142137671b512dc06eae2e1ca426b7b9b0983cce0dffa65b10ee0d33b4bab341189df36d9091fd8fc2ca9b49b87e8d656247d718b264059ec27cccff9d6dd904ae585f1dfbe182a31fbf9332885a69cd247a6e4abf19e8e80743b4e91e894908ccdfac7142587868df01aaa0ccf26f190935005a55b18041205c4542fa80131a12dc44378ff23bd63cc5fcbdf18f93bfae8ae06991e248e307623bd6c0f1bab13bea"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x10d0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x696}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x1d, 0x3, "8640ebe27935de349b498107b1ae947c2d6d986292cd2a1861"}, @TIPC_NLA_NODE_ID={0x85, 0x3, "e5e81eeeed86095c1ca97cb44a8941113b04e025f57370b11051a1ea2b901f9ce69de03166cefc36cdeed7bb6deaaaa70fffc5b68e2f6ae96e6818d449108d3634b7d3530de417829f54e9be24ee322bee6f5378302cc35f9d048d46e93d36187b361763f2881bb75a67d302a0e50e10bb537a61637f856ca832c278855e6201d5"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x6, 0x3, "4de1"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x15e0}, 0x1, 0x0, 0x0, 0x10}, 0x8860) [ 1473.810689] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:28 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:28 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:28 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0xe2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xfffffffffffffffe, 0x2a, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) [ 1473.860412] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1473.884272] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:28 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:28 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x100, 0x70bd2d, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) socketpair(0x0, 0x5, 0xffffffff, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000140)={0x395, 0x1, 0x0, 0x1, 0x5}, 0x14) 03:04:28 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:28 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f, 0x1}) 03:04:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:28 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 03:04:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x105, 0x2}) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000040)=0xfffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x3) sendto$isdn(0xffffffffffffffff, &(0x7f0000000280)={0x93, 0x69b, "a58e8f27292b550952c958f88fe43b25554b4b4d866b222497bf5753aeeb489538be3397696485b098e30d7ccc02892ea19743f4a21e7e60cd32d1d1b51277"}, 0x47, 0x0, &(0x7f0000000100)={0x22, 0xff, 0x1, 0xb1, 0x8}, 0x6) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000080}, 0x68004010) 03:04:28 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r1], 0x2e8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r4, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r5], 0x2e8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x4, 0x40, 0x8, 0x6f, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8, 0x40, 0x1f, 0x4}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r11, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r12], 0x2e8}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001680)={&(0x7f0000000ac0)={0xbb8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x90d}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1603}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xe36}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2d}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}, {{0x8, 0x1, r1}, {0x12c, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x2, 0x4f, 0x6, 0x20}, {0x8, 0x1, 0x40, 0x5}, {0x8, 0x1, 0x81, 0x1000}, {0x3f, 0x81, 0x9, 0x5}, {0x9, 0x6, 0x80, 0x6}, {0xfffc, 0x0, 0x4, 0x9}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x40, 0x1, 0x3f}, {0x1000, 0xdd, 0x5, 0x9}, {0xffff, 0x6, 0x9, 0x9}]}}}]}}, {{0x8, 0x1, r5}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x4, 0xff, 0x4, 0x8}, {0x1, 0x48, 0x1f, 0x9}, {0x7, 0x90, 0x1f, 0x9}, {0x5, 0xb7, 0x61, 0x4}, {0x7879, 0xfd, 0x9, 0x7ff}, {0x9, 0x6, 0x0, 0x2}, {0x5, 0x34, 0x80, 0x100}, {0x800, 0x1f, 0x80, 0x10001}, {0x6, 0x80, 0x2, 0x3ff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r7}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}]}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x40004}, 0x8041) 03:04:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 03:04:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:28 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xb91, 0x11, 0x0, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x99a88810a635975b, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) [ 1474.768939] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 03:04:28 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) [ 1474.813123] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1474.874851] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:29 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000002700)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2c, 0x1, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00', r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd3d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc3}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd67}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd893}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8c4}, 0x4004000) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r6, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r7], 0x2e8}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r7}}}]}}]}, 0x60}}, 0x80fba92a1a08db1c) pselect6(0x40, &(0x7f0000000000)={0x4, 0x2, 0x0, 0x40000000, 0x0, 0x800000000000, 0x3}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x210000, 0x0) ioctl$RTC_RD_TIME(r8, 0x80247009, &(0x7f0000000300)) 03:04:29 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0x2f, 0x1}) 03:04:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xfffffffffffeffff) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) inotify_rm_watch(r2, 0x0) ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:29 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, 0x0, 0x0) 03:04:29 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002700)=ANY=[@ANYBLOB="44050000", @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf2502000000080001"], 0x544}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r5, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r6], 0x2e8}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', r6, 0x4, 0x81, 0x80, 0x1, 0x5c, @private2, @private2={0xfc, 0x2, [], 0x1}, 0x7841, 0x1, 0x101}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0xa4, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_hash_stats={{{0x0, 0x1, 'lb_hash_stats\x00'}, {}, {0x51, 0x4, 0x9}}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xb04}}}, {0x38, 0x1, @lb_tx_hash_to_port_mapping={{{0x0, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {}, {0x0, 0x4, r7}}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4044804}, 0x0) 03:04:29 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) socketpair(0x1d, 0xa, 0xffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)={0x0, 0x4, 0x9}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x250f}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44011}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) r8 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@migrate={0x108, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@multicast1, @in6=@private0, 0x4e22, 0x0, 0x4e24, 0xef19, 0xa, 0x20, 0x80, 0x32, 0x0, r8}, 0x6e6bbe, 0x2}, [@algo_aead={0xaa, 0x12, {{'morus1280-avx2\x00'}, 0x2f0, 0x100, "08b76082d7bbde38943257db70ea4b614f28016b055a0c1ea0713cc4c70dbdfd118eb7b97a48202c7dfeb1d287098676108630a7e89625f0834309c8d393a51abd276a2ecc92a4fd64d94634ec59c8c020d76bb283308082a6d9d55e9f2d"}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 03:04:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) accept4(r2, 0x0, &(0x7f0000000100), 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0x2f, 0x1}) 03:04:29 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0x2f, 0x1}) 03:04:29 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002700)=ANY=[@ANYBLOB="44050000", @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf2502000000080001"], 0x544}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r5, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r6], 0x2e8}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', r6, 0x4, 0x81, 0x80, 0x1, 0x5c, @private2, @private2={0xfc, 0x2, [], 0x1}, 0x7841, 0x1, 0x101}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0xa4, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_hash_stats={{{0x0, 0x1, 'lb_hash_stats\x00'}, {}, {0x51, 0x4, 0x9}}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xb04}}}, {0x38, 0x1, @lb_tx_hash_to_port_mapping={{{0x0, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {}, {0x0, 0x4, r7}}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4044804}, 0x0) 03:04:29 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3d8, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x100, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x76f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1cb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfc84}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc20d}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x55}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf6fb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "6377a33f303197a44baed13578f882922185aa3cde0cc191b0595078a96f8b9c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x13e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf37}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffc3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x184, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xad, 0x3, "e0d21610fedb4ce528aee9b649c1a791aa3edceaaff023d1e86ff295f9de7f35c613b47903d0a31dc695437e11f64998635783e572cc7f71dfe259ab6242eae39ad83bbffd4f68b6f79b764e16c1f544043ebf5d29eb8947e5b272caa2e6ad2e202d8318af669af8dc8fded4545a7dd5f43e075955784a9b0fe36217360c81f3ce6b33b2d0244be1d7ba33767978a7657c5b0dbc064284494c6de60161ac36a5bcd6c5f1bcd426adee"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "45f5e8178243175561084856b11225e127448379914b6be571e04e"}}, @TIPC_NLA_NODE_ID={0x86, 0x3, "b41d1665525491f373cda0ec42c5c03fb5356f1506d5fba86bc8979091df2f72c26843126b747241cf396ca21cde6becc85050c5600361fa0eaab67342211ba04a011e669889d223012114605bc247b26d172d6d9d283e10c35e439cac227ef28c9cc0fb85a670ea30cf62d7139cb4adb6b031550791a709b6e7e0f115bba48db000"}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x4}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x20010806}, 0x4008040) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000005c0)) 03:04:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x50000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x107, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x20c2, 0x0) 03:04:30 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, 0x0, 0x0) 03:04:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x0, 0x1}) 03:04:30 executing program 5: socketpair(0x2a, 0x1, 0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4afffff4", @ANYRES16=r3, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x20008844) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', r2) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x19c, r7, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xaca}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa9000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb28}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff4d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff0a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x448}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe25}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x78, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2f2}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x9080}, 0x4048001) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:30 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, 0x0, 0x0) 03:04:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8048014}, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:30 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x68, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffdb8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x33}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:30 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, 0x0, 0x0) 03:04:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) io_setup(0x103f, &(0x7f0000000140)=0x0) io_destroy(r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r2, &(0x7f0000000040)="c9cd6173025d5b2e80441e9efd01130ebc97049ed07618165e24a1160ac8cc20b98b82c268034b8df3331831850396a3d7b4ee924c2bb21039e9aa238fd6a0f73a5c02a141ed7c1ec7fae4c03e5e69ed177abfa4808eac501140722189d3b3ab47b4f3022a5415ad32805cdd043a927d7a40a1232f439ec7b409595bd57e025f4b344a33fc6cea2b7dc19957aef1f98787df017fc188bcbcc4", 0x99, 0xa3f0}, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x90000001, 0xd}) 03:04:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x0, 0x1}) 03:04:30 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x24, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:30 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1376}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1d}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000884}, 0x4050) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', r1) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x188, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x826}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 03:04:30 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, 0x0, 0x0) 03:04:31 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, 0x0, 0x0) 03:04:31 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x0, 0x1}) 03:04:31 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000100)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:31 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="60010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000c004) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r4, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r5], 0x2e8}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r8, @ANYBLOB="0800010000000000", @ANYRES32=r9], 0x2e8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000036c0)={'team0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r11, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r13, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r14], 0x2e8}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000003dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003d80)={&(0x7f0000000280)={0x670, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r5}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x28d}}}]}}, {{0x8, 0x1, r14}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffffeb7e}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x7, 0x4, 'roundrobin\x00'}}}]}}]}, 0x670}, 0x1, 0x0, 0x0, 0x811}, 0x4000040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000001, 0xd}) 03:04:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x400, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8040}, 0x200080c4) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) recvmsg(r0, &(0x7f0000000cc0)={&(0x7f00000007c0)=@can, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000840)=""/12, 0xc}, {&(0x7f0000000880)=""/108, 0x6c}, {&(0x7f0000000900)=""/167, 0xa7}, {&(0x7f00000009c0)=""/138, 0x8a}, {&(0x7f0000000a80)=""/228, 0xe4}], 0x5, &(0x7f0000000c00)=""/189, 0xbd}, 0xc0000000) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1200802}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x428, 0x3f4, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x11, [0x8, 0xef, 0x7f, 0x101, 0x3ff, 0x7, 0xe00, 0x6, 0xffff8000, 0xffff, 0xcd, 0x3, 0x287c, 0x398, 0x2, 0x6, 0xffff, 0x1, 0x7, 0x6f5e, 0x3, 0x4, 0x6, 0x3f8, 0xfffffffb, 0x9, 0x7, 0x1000, 0x0, 0x80, 0xfffffe01, 0x8000, 0x2000, 0xfffffffb, 0x2, 0x8, 0xfffff001, 0x1, 0x0, 0x3, 0x2, 0xfffeffff, 0x2b4, 0x1, 0x5, 0xfffffff9, 0x0, 0x0, 0x9, 0x7c73, 0x10, 0x3ff, 0x3f, 0x1, 0xffffffff, 0x10001, 0x101, 0x8, 0x8, 0x7, 0x2, 0x7fff, 0x5, 0x20], [0x5, 0x81, 0x8, 0x2, 0x1000, 0x6, 0x9, 0x8, 0x6, 0x3, 0x6, 0x9, 0x80000001, 0x9, 0x92d, 0x1, 0xfffff28a, 0x3, 0x9, 0xffffff3d, 0x72b16f26, 0x0, 0x6, 0x2, 0x1aa9, 0x2, 0x0, 0x8a9800, 0x42, 0xffffffff, 0x40, 0x4, 0x2, 0x2, 0x6, 0x9, 0x80000001, 0xba, 0x3f, 0x3f, 0x62, 0x101, 0x8, 0x0, 0x808, 0x1f, 0xffffffff, 0x81, 0xfffffffa, 0x10001, 0x8, 0x2, 0x1, 0x1, 0x4, 0x9, 0x6, 0x9, 0x8, 0x8, 0x3, 0x4, 0x1, 0xfff], [0x8, 0x6, 0x1, 0x0, 0x1, 0x100, 0x4, 0x28000, 0xfffffffb, 0xb2, 0x7fff, 0x0, 0x4, 0x3ff, 0x6, 0xfffffff8, 0x401, 0x1, 0xfffffffa, 0x1, 0x6, 0x8, 0x0, 0x227, 0x1, 0x77a, 0x10000, 0x401, 0x12a0, 0x4, 0x10000, 0x9, 0xee, 0xfffffbff, 0x4, 0xe, 0xae96, 0x7, 0x8, 0x8, 0x7ff, 0x100, 0x101, 0x2, 0xffff8000, 0x1, 0x1000, 0x9, 0x1, 0x4, 0x9, 0x959, 0x3, 0x7ff, 0xfff, 0x5f99, 0x2, 0x8da, 0x40, 0x8, 0x200, 0x0, 0x67, 0x2], [0x7ff, 0x2b, 0x8b, 0x3, 0x0, 0x6, 0x6, 0x7, 0xff, 0x6, 0xf50a, 0x9, 0x8, 0x8c, 0x4b82, 0x0, 0x100, 0x3, 0x8d7c, 0x4, 0x6, 0x99, 0xffffffff, 0x4, 0x40505ad, 0x10000, 0x59a0, 0x7, 0x2, 0x3, 0x2, 0x9, 0x1, 0x2, 0x3944, 0x7, 0x2, 0xdd, 0x4, 0x8001, 0xfffffeff, 0x3, 0x5, 0x1, 0x800000, 0x9, 0x9, 0x1, 0x785374f9, 0x2, 0x6, 0x2a50eb97, 0xfffffff9, 0x7fffffff, 0x4, 0x8, 0x3, 0xfffffbe8, 0x8, 0x2, 0x9, 0x2, 0x2, 0x7f], 0x6, ['\x00', '{\\\x00', '@\x00']}, [""]}, 0x428}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="22000000f70300042a3d7000fbdbdf2507000000070000002e2f66696c65302e2f66696c65300000"], 0x28}, 0x1, 0x0, 0x0, 0x24004041}, 0x80) 03:04:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x400200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:31 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd8, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcfd4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1106}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfa}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa95b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff59}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc8e0}, 0x20000800) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00', r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5164}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2d, 'memory'}, {0x2b, 'memory'}, {0x2b, 'io'}, {0x2d, 'memory'}, {0x2b, 'pids'}, {0x2b, 'io'}]}, 0x2c) 03:04:31 executing program 3: ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fedbdf253b35aee4cfebe2a408004100080000000800020005000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 03:04:31 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f}) 03:04:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x40000000fa, 0x27}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x3bc, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x316eed62}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x49c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x97}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xea}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71e15f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc7ba}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5ac}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfbfa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa9e9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x663}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8ce}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @private1, 0x7fff}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa324}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x100, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb789}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}]}]}, 0x3bc}}, 0x400c811) 03:04:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)) 03:04:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x1, 0x1, {0x9, 0x2b, 0x2, 0x3, 0x3, 0x10001, 0x2, 0xb9, 0xffffffffffffffff}}) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x101100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x438240, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x345000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0xfffffffffffffffc) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) 03:04:32 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xe}}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8841}, 0x24) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x37, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:32 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0x0, 0x8406}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f}) 03:04:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x800, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) bind$isdn(r2, &(0x7f0000000300)={0x22, 0x1f, 0x0, 0x0, 0x7f}, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000380), 0x4) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0xc9e, 0x4) sched_rr_get_interval(0x0, &(0x7f0000000300)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0x12) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) accept4(r0, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80, 0x800) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000280)=0x81, &(0x7f00000002c0)=0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000140)=0x4, 0x4) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000240)={0xee, 0xf}) 03:04:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x80b80, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x2) 03:04:32 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x11c, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x42, 0x3, "c67ce0e0645a1530967ce8c5bb97f8fdb6186838d2144759b74af5a2975d60aad8623f9e783a6668bdf0798b03d90f8ddcf79c8e57b58914969d9e5af85d"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "8b2c1c3573695a7b2589e76c73254766c65eb27868173ccbd85a6d9a1644b5ae77"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "0387c8db84997b55ed3d08c55f1596e78e31e943d7e045440aa753dfe8e63d563634cfd9"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x10}, 0x24000810) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xc00, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_genetlink_get_family_id$nbd(0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r5, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r6], 0x2e8}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x8804}, 0x44010) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', r2) 03:04:32 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:32 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002700)=ANY=[@ANYBLOB="44050000", @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf2502000000080001"], 0x544}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r6, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r7], 0x2e8}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xff, 0x8, 0x8, @dev={0xfe, 0x80, [], 0x42}, @private0={0xfc, 0x0, [], 0x1}, 0x80, 0x10, 0x1000, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x20c, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40001}, 0x44000) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r4, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r5], 0x2e8}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r8, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r9], 0x2e8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x1c4, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfbfffff9}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xdc6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2c8f2}}, {0x8, 0x6, r10}}}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x95}, 0x8000) 03:04:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x101, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) [ 1478.195386] nla_parse: 10 callbacks suppressed [ 1478.195393] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.5'. 03:04:32 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xc001, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000140)) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) r3 = socket$isdn(0x22, 0x3, 0x4) bind$isdn(r3, &(0x7f0000000180)={0x22, 0x7, 0x1f, 0x7f, 0x1}, 0x6) 03:04:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$AUDIT_USER(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, 0x3ed, 0x1, 0x70bd25, 0x25dfdbfb, "2269e3dd7a8441de259c45e6e844c9a78603b347e5ace8f2fc69e40a57583263090aab4181dcd82de2a8d0eb217804a76156b4200c2097b9f90bb58ca5187164992297e7e0bd8ddbae2c4ec6ffda2007943b94b989dd2ccf14a1fa313d2ba506227dc3adb49409551a8f4263acf9dc957103f45bbfbc0c77ed6d8cf8c15a9aabe695b5f9cfb35a91440f9348d1c8fcd537ddea28f06af20638c635924baca21270a0693ea6e941104bd4a95e893bc50a57aa2c9efae1caf7e29838ab1ed7aff3df5c077af2881afc81ede4b5893ec00fa2adb2d4c3316d50add7c37a0f5bfae6574bca02953b0baff46b463a5b", ["", "", "", ""]}, 0x100}, 0x1, 0x0, 0x0, 0x890}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:32 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x301000, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x34, 0x0, 0xffffffffffffffff}) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000140)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00', r0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000001c0)=0x8000, 0x4) [ 1478.262095] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1478.297542] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1478.323448] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1478.350563] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1478.388070] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1478.404459] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f}) 03:04:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xc001, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000140)) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) r3 = socket$isdn(0x22, 0x3, 0x4) bind$isdn(r3, &(0x7f0000000180)={0x22, 0x7, 0x1f, 0x7f, 0x1}, 0x6) 03:04:33 executing program 5: openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00', r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x2) 03:04:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x180, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)) 03:04:33 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x2ec, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x1c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd3, 0x3, "1928c7937c21c5ce1908e9e0fdd7c96d5c6ddb22c574102dd7b857de680b735d05236b1083ef0a1797ae0ea444fec4ece720eacccf7e86a59190c41cc5ff91479e514b7c8cc607a318678535c19337ba916c7952098cd8e43bfdd8b44dceb17df820f288199ea1ce3b85b6dd4709bfb6ce2fed26c3b3a967b420e45bc824a06d4f152bf15bdcd337da439e4615bc50cfd974639c3e44b20c810427db66b62add045494d19f716c5e5b8d713f41277cdbd2adfca714cfaf14c70af3d711750288983688b11a3125f1e6aedb41d7a5dc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x80, 0x3, "a862febc01897dfc687cbc44e4ba099683f4c8cafeb40bd9c267868c2a3e2abaacae3f14ceaef647432e3d5f816a26b7baae3abcedadb05368e2c5ac0c25b8c2ea24701a6957d0211e0bcdefcc9cc82a938a248e670e1308f81e8df238d4fc34c5871c7aac3845fc7a10de6746201a6f52d6bddcf10816d5ebc029f3"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "c3ea2c81aab0fdb6acaa716bd3f111ac0936898925a8ae70043e17ebb0c9a0085703"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}]}, @TIPC_NLA_SOCK={0xd0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x524}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r5, @ANYBLOB="01002abd7000f7ffffff0300000008000100", @ANYRES32=r6], 0x2e8}}, 0x0) getsockname(r0, &(0x7f0000000e40)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000ec0)=0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001180)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000000f00)={0x23c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4023}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40890}, 0x40) 03:04:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f}) 03:04:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xc001, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000140)) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) r3 = socket$isdn(0x22, 0x3, 0x4) bind$isdn(r3, &(0x7f0000000180)={0x22, 0x7, 0x1f, 0x7f, 0x1}, 0x6) 03:04:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0xaa800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x8000, 0xffffffffffffffff, &(0x7f0000000140)="3b183e6c340c4c95fbda62b0c12c172444bddd75ff806cbec56bbc8c3b1e156b52fae87782e6a071edcd1e40b622d12130c954971d5499f4f29426b4219078e601766a6b2de8f89d7f756e772cfeed03ab322665475e62e6c05e3833605fda71ef290507fcd1d6102a8ddd0b97dcf5c6109a5f9f9647b6fd9f59214eeb35d7441d65d527ade4efb684aaefbebb291e3b42ffdcc709e58c16e7126ce86fcead78e66c7ba36ef03ae40e324b11b553adf3ca3acfbdec15417b16a7896dc82be54eb5ab62f2", 0xc4, 0x3, 0x0, 0x5, r2}, &(0x7f0000000240)) getpeername(r2, &(0x7f00000002c0)=@vsock, &(0x7f0000000100)=0x80) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) [ 1479.073312] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. 03:04:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xc001, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000140)) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) socket$isdn(0x22, 0x3, 0x4) 03:04:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80b, 0x5, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x6) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 03:04:33 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) [ 1479.124960] netlink: 716 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1479.666199] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1479.677763] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1479.679432] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1479.696611] CPU: 0 PID: 12980 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 1479.704508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1479.711873] syz-executor.5 cpuset= [ 1479.713864] Call Trace: [ 1479.713886] dump_stack+0x1b2/0x281 [ 1479.713901] warn_alloc.cold+0x96/0x1cc [ 1479.713914] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1479.713928] ? zone_watermark_ok_safe+0x220/0x220 [ 1479.737458] __alloc_pages_nodemask+0x2127/0x2720 [ 1479.742316] ? retint_kernel+0x2d/0x2d [ 1479.746216] ? lock_acquire+0x170/0x3f0 [ 1479.750204] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1479.755063] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1479.760620] ? __mutex_unlock_slowpath+0x75/0x770 [ 1479.765467] ? retint_kernel+0x2d/0x2d [ 1479.769358] alloc_pages_current+0x155/0x260 [ 1479.773764] ion_page_pool_alloc+0x118/0x1b0 [ 1479.778166] ion_system_heap_allocate+0x133/0x8c0 [ 1479.783000] ? ion_alloc+0x187/0x810 [ 1479.786707] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1479.792164] ? ion_system_contig_heap_create+0x130/0x130 [ 1479.797609] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1479.802620] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1479.807463] ion_alloc+0x204/0x810 [ 1479.811020] ? ion_dma_buf_release+0x40/0x40 [ 1479.815431] ? __might_fault+0x177/0x1b0 [ 1479.819493] ion_ioctl+0xea/0x1f0 [ 1479.822935] ? ion_query_heaps+0x360/0x360 [ 1479.827163] ? ion_query_heaps+0x360/0x360 [ 1479.831392] do_vfs_ioctl+0x75a/0xff0 [ 1479.835188] ? ioctl_preallocate+0x1a0/0x1a0 [ 1479.839602] ? lock_downgrade+0x740/0x740 [ 1479.843747] ? __fget+0x225/0x360 [ 1479.847372] ? do_vfs_ioctl+0xff0/0xff0 [ 1479.851353] ? security_file_ioctl+0x83/0xb0 [ 1479.855763] SyS_ioctl+0x7f/0xb0 [ 1479.859312] ? do_vfs_ioctl+0xff0/0xff0 [ 1479.864281] do_syscall_64+0x1d5/0x640 [ 1479.868193] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1479.873656] RIP: 0033:0x465f69 [ 1479.876836] RSP: 002b:00007f9a160a9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1479.885252] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1479.892700] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1479.899968] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1479.907935] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1479.915302] R13: 00007ffd4863bc0f R14: 00007f9a160a9300 R15: 0000000000022000 [ 1479.925710] / mems_allowed=0-1 [ 1479.929050] CPU: 1 PID: 12991 Comm: syz-executor.5 Not tainted 4.14.226-syzkaller #0 [ 1479.936941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1479.946315] Call Trace: [ 1479.948944] dump_stack+0x1b2/0x281 [ 1479.952581] warn_alloc.cold+0x96/0x1cc [ 1479.956822] ? zone_watermark_ok_safe+0x220/0x220 [ 1479.961700] __alloc_pages_nodemask+0x2127/0x2720 [ 1479.966567] ? retint_kernel+0x2d/0x2d [ 1479.970515] ? lock_acquire+0x170/0x3f0 [ 1479.974514] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1479.979475] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1479.985678] ? __mutex_unlock_slowpath+0x75/0x770 [ 1479.990563] alloc_pages_current+0x155/0x260 [ 1479.995080] ion_page_pool_alloc+0x118/0x1b0 [ 1479.999532] ion_system_heap_allocate+0x133/0x8c0 [ 1480.004407] ? ion_alloc+0x187/0x810 [ 1480.008144] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1480.013644] ? ion_system_contig_heap_create+0x130/0x130 [ 1480.015570] Mem-Info: [ 1480.019109] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1480.019122] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1480.019137] ion_alloc+0x204/0x810 [ 1480.019151] ? ion_dma_buf_release+0x40/0x40 [ 1480.019163] ? __might_fault+0x177/0x1b0 [ 1480.019177] ion_ioctl+0xea/0x1f0 [ 1480.025001] active_anon:10841 inactive_anon:6740 isolated_anon:24 [ 1480.025001] active_file:6263 inactive_file:5358 isolated_file:15 [ 1480.025001] unevictable:0 dirty:197 writeback:0 unstable:0 [ 1480.025001] slab_reclaimable:22172 slab_unreclaimable:106192 [ 1480.025001] mapped:61687 shmem:6931 pagetables:776 bounce:0 [ 1480.025001] free:55468 free_pcp:206 free_cma:0 [ 1480.026690] ? ion_query_heaps+0x360/0x360 [ 1480.026703] ? ion_query_heaps+0x360/0x360 [ 1480.026714] do_vfs_ioctl+0x75a/0xff0 [ 1480.026725] ? ioctl_preallocate+0x1a0/0x1a0 [ 1480.026734] ? lock_downgrade+0x740/0x740 [ 1480.026747] ? __fget+0x225/0x360 [ 1480.026757] ? do_vfs_ioctl+0xff0/0xff0 [ 1480.051635] Node 0 active_anon:43364kB inactive_anon:26960kB active_file:25052kB inactive_file:21424kB unevictable:0kB isolated(anon):96kB isolated(file):60kB mapped:246748kB dirty:784kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1480.081457] ? security_file_ioctl+0x83/0xb0 [ 1480.081470] SyS_ioctl+0x7f/0xb0 [ 1480.081480] ? do_vfs_ioctl+0xff0/0xff0 [ 1480.081491] do_syscall_64+0x1d5/0x640 [ 1480.081507] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1480.081516] RIP: 0033:0x465f69 [ 1480.081520] RSP: 002b:00007f3964351188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1480.171973] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1480.179600] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1480.186886] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1480.194158] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1480.201433] R13: 00007ffefc87680f R14: 00007f3964351300 R15: 0000000000022000 [ 1480.210837] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1480.241845] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1480.274826] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1480.291422] Node 0 DMA32 free:78788kB min:36200kB low:45248kB high:54296kB active_anon:43460kB inactive_anon:26960kB active_file:24992kB inactive_file:21520kB unevictable:0kB writepending:848kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:3064kB bounce:0kB free_pcp:804kB local_pcp:740kB free_cma:0kB [ 1480.330714] lowmem_reserve[]: 0 0 0 0 0 [ 1480.339522] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1480.397550] lowmem_reserve[]: 0 0 0 0 0 [ 1480.406275] Node 1 Normal free:53676kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1480.463536] lowmem_reserve[]: 0 0 0 0 0 [ 1480.472160] Node 0 DMA: 2*4kB (UE) 7*8kB (UE) 7*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11056kB [ 1480.515515] Node 0 DMA32: 2729*4kB (UME) 896*8kB (UME) 157*16kB (ME) 489*32kB (UME) 15*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37332kB [ 1480.547630] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1480.571002] Node 1 Normal: 77*4kB (U) 419*8kB (U) 278*16kB (U) 88*32kB (U) 6*64kB (U) 17*128kB (U) 11*256kB (U) 7*512kB (U) 5*1024kB (U) 0*2048kB 7*4096kB (UM) = 53676kB [ 1480.610574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1480.630791] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1480.649849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1480.669627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1480.688718] 11487 total pagecache pages [ 1480.703817] 0 pages in swap cache [ 1480.714858] Swap cache stats: add 0, delete 0, find 0/0 [ 1480.733443] Free swap = 0kB [ 1480.745556] Total swap = 0kB [ 1480.752101] 2097051 pages RAM [ 1480.769304] 0 pages HighMem/MovableOnly [ 1480.781323] 363840 pages reserved [ 1480.792780] 0 pages cma reserved [ 1481.052571] oom_reaper: reaped process 12991 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1481.189335] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1481.220822] in:imklog cpuset=/ mems_allowed=0-1 [ 1481.225912] CPU: 0 PID: 7743 Comm: in:imklog Not tainted 4.14.226-syzkaller #0 [ 1481.233394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.243036] Call Trace: [ 1481.245640] dump_stack+0x1b2/0x281 [ 1481.249287] dump_header+0x178/0x82f [ 1481.253010] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1481.258120] ? ___ratelimit+0x2cd/0x530 [ 1481.262189] oom_kill_process.cold+0x10/0xb18 [ 1481.266691] out_of_memory+0xe3e/0x1190 [ 1481.270666] ? oom_killer_disable+0x1c0/0x1c0 [ 1481.275173] ? mutex_trylock+0x152/0x1a0 [ 1481.279255] __alloc_pages_nodemask+0x23e1/0x2720 [ 1481.284114] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1481.288978] alloc_pages_current+0x155/0x260 [ 1481.293584] filemap_fault+0xea3/0x1980 [ 1481.297690] ext4_filemap_fault+0x84/0xb0 [ 1481.301843] __do_fault+0xfa/0x380 [ 1481.305595] __handle_mm_fault+0x2497/0x4620 [ 1481.310038] ? vm_insert_page+0x7c0/0x7c0 [ 1481.314189] ? lock_downgrade+0x740/0x740 [ 1481.318360] handle_mm_fault+0x391/0x860 [ 1481.322428] __do_page_fault+0x549/0xad0 [ 1481.326494] ? spurious_fault+0x640/0x640 [ 1481.330641] ? do_page_fault+0x60/0x500 [ 1481.334614] ? page_fault+0x2f/0x50 [ 1481.338246] page_fault+0x45/0x50 [ 1481.341699] RIP: 1fa0:0x1f9f [ 1481.344711] RSP: 0000:00005586adc349d0 EFLAGS: 7f38f1d5fda0 [ 1481.364722] Mem-Info: [ 1481.377791] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1481.382585] active_anon:13640 inactive_anon:6740 isolated_anon:0 [ 1481.382585] active_file:22 inactive_file:5 isolated_file:0 [ 1481.382585] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1481.382585] slab_reclaimable:22149 slab_unreclaimable:104883 [ 1481.382585] mapped:54713 shmem:6931 pagetables:766 bounce:0 [ 1481.382585] free:13962 free_pcp:98 free_cma:0 [ 1481.414516] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1481.435527] Node 0 active_anon:54560kB inactive_anon:26960kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:218852kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1481.438870] CPU: 1 PID: 12991 Comm: syz-executor.5 Not tainted 4.14.226-syzkaller #0 [ 1481.466523] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1481.472526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.472531] Call Trace: [ 1481.472552] dump_stack+0x1b2/0x281 [ 1481.472566] warn_alloc.cold+0x96/0x1cc [ 1481.472586] ? zone_watermark_ok_safe+0x220/0x220 [ 1481.498383] Node 0 [ 1481.507704] ? usleep_range+0x130/0x130 [ 1481.507714] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1481.507732] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1481.507764] ? run_timer_softirq+0x5a0/0x5a0 [ 1481.510337] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.513953] __alloc_pages_nodemask+0x2127/0x2720 [ 1481.517928] lowmem_reserve[]: [ 1481.522738] ? lock_acquire+0x170/0x3f0 [ 1481.524943] 0 [ 1481.528919] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1481.528931] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1481.528947] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1481.528965] alloc_pages_current+0x155/0x260 [ 1481.534484] 2717 [ 1481.539503] ion_page_pool_alloc+0x118/0x1b0 [ 1481.539514] ion_system_heap_allocate+0x133/0x8c0 [ 1481.539524] ? ion_alloc+0x187/0x810 [ 1481.539539] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1481.543925] 2718 [ 1481.569427] ? ion_system_contig_heap_create+0x130/0x130 [ 1481.569439] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1481.569449] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1481.569460] ion_alloc+0x204/0x810 [ 1481.569473] ? ion_dma_buf_release+0x40/0x40 [ 1481.569484] ? __might_fault+0x177/0x1b0 [ 1481.569495] ion_ioctl+0xea/0x1f0 [ 1481.569504] ? ion_query_heaps+0x360/0x360 [ 1481.569516] ? ion_query_heaps+0x360/0x360 [ 1481.569529] do_vfs_ioctl+0x75a/0xff0 [ 1481.574612] 2718 [ 1481.577614] ? ioctl_preallocate+0x1a0/0x1a0 [ 1481.577625] ? lock_downgrade+0x740/0x740 [ 1481.577637] ? __fget+0x225/0x360 [ 1481.577647] ? do_vfs_ioctl+0xff0/0xff0 [ 1481.581606] 2718 [ 1481.586192] ? security_file_ioctl+0x83/0xb0 [ 1481.595489] SyS_ioctl+0x7f/0xb0 [ 1481.600965] Node 0 [ 1481.605327] ? do_vfs_ioctl+0xff0/0xff0 [ 1481.607415] DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:54560kB inactive_anon:26960kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:3064kB bounce:0kB free_pcp:272kB local_pcp:64kB free_cma:0kB [ 1481.611765] do_syscall_64+0x1d5/0x640 [ 1481.616584] lowmem_reserve[]: [ 1481.620300] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1481.620310] RIP: 0033:0x465f69 [ 1481.620314] RSP: 002b:00007f3964351188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1481.620324] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1481.620332] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1481.625861] 0 [ 1481.627916] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1481.627921] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1481.627925] R13: 00007ffefc87680f R14: 00007f3964351300 R15: 0000000000022000 [ 1481.637428] warn_alloc_show_mem: 1 callbacks suppressed [ 1481.637431] Mem-Info: [ 1481.657740] 0 [ 1481.667103] active_anon:13640 inactive_anon:6740 isolated_anon:0 [ 1481.667103] active_file:20 inactive_file:2 isolated_file:0 [ 1481.667103] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1481.667103] slab_reclaimable:22149 slab_unreclaimable:104883 [ 1481.667103] mapped:54713 shmem:6931 pagetables:766 bounce:0 [ 1481.667103] free:13962 free_pcp:97 free_cma:0 [ 1481.679327] 0 [ 1481.690002] Node 0 active_anon:54560kB inactive_anon:26960kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:218852kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1481.701533] 0 [ 1481.712178] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1481.747148] 0 [ 1481.757409] Node 0 [ 1481.787468] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.801656] Node 0 [ 1481.809557] lowmem_reserve[]: [ 1481.853935] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.872712] 0 [ 1481.902554] lowmem_reserve[]: [ 1481.944995] 2717 [ 1481.963749] 0 0 0 0 0 [ 1481.968941] Node 1 Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1481.979945] 2718 [ 1482.001127] lowmem_reserve[]: 0 0 0 0 0 [ 1482.007229] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 5*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 1482.011690] 2718 [ 1482.027178] Node 0 DMA32: 2465*4kB (ME) 654*8kB (UME) 135*16kB (UME) 28*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18148kB [ 1482.041554] 2718 [ 1482.045172] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1482.046378] Node 0 [ 1482.060486] Node 1 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (U) 6*4096kB (UM) = 26772kB [ 1482.072997] DMA32 free:18148kB min:36200kB low:45248kB high:54296kB active_anon:54560kB inactive_anon:26960kB active_file:68kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:3064kB bounce:0kB free_pcp:296kB local_pcp:236kB free_cma:0kB [ 1482.075687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.112361] lowmem_reserve[]: 0 0 0 0 0 [ 1482.119519] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.125577] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1482.153537] lowmem_reserve[]: 0 0 0 0 0 [ 1482.157953] Node 1 Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1482.166397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.194664] lowmem_reserve[]: 0 0 0 0 0 [ 1482.199984] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 5*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 1482.207986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1482.223563] Node 0 DMA32: 2465*4kB (ME) 655*8kB (UME) 135*16kB (UME) 28*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18156kB [ 1482.235688] 6963 total pagecache pages [ 1482.247996] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1482.251609] 0 pages in swap cache [ 1482.266557] Swap cache stats: add 0, delete 0, find 0/0 [ 1482.269490] Node 1 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (U) 6*4096kB (UM) = 26772kB [ 1482.277965] Free swap = 0kB [ 1482.295722] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.298379] Total swap = 0kB [ 1482.304655] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1482.317920] 2097051 pages RAM [ 1482.321031] 0 pages HighMem/MovableOnly [ 1482.324890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.324994] 363840 pages reserved [ 1482.336308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1482.347529] 0 pages cma reserved [ 1482.350909] Out of memory (oom_kill_allocating_task): Kill process 7743 (in:imklog) score 0 or sacrifice child [ 1482.356109] 6963 total pagecache pages [ 1482.365033] 0 pages in swap cache [ 1482.371047] Killed process 7693 (rsyslogd) total-vm:254332kB, anon-rss:840kB, file-rss:0kB, shmem-rss:0kB [ 1482.378381] Swap cache stats: add 0, delete 0, find 0/0 [ 1482.386351] Free swap = 0kB [ 1482.393590] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1482.410912] Total swap = 0kB [ 1482.413947] 2097051 pages RAM [ 1482.417316] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1482.422373] 0 pages HighMem/MovableOnly [ 1482.426346] 363840 pages reserved [ 1482.434365] CPU: 1 PID: 7957 Comm: syz-fuzzer Not tainted 4.14.226-syzkaller #0 [ 1482.441831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.451276] Call Trace: [ 1482.453879] dump_stack+0x1b2/0x281 [ 1482.457529] dump_header+0x178/0x82f [ 1482.459732] 0 pages cma reserved [ 1482.461236] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1482.469675] ? ___ratelimit+0x2cd/0x530 [ 1482.473646] oom_kill_process.cold+0x10/0xb18 [ 1482.478159] out_of_memory+0xe3e/0x1190 [ 1482.482146] ? oom_killer_disable+0x1c0/0x1c0 [ 1482.486634] ? mutex_trylock+0x152/0x1a0 [ 1482.490688] __alloc_pages_nodemask+0x23e1/0x2720 [ 1482.495541] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1482.500484] alloc_pages_current+0x155/0x260 [ 1482.504905] filemap_fault+0xea3/0x1980 [ 1482.508994] ext4_filemap_fault+0x84/0xb0 [ 1482.513147] __do_fault+0xfa/0x380 [ 1482.516691] __handle_mm_fault+0x2497/0x4620 [ 1482.521540] ? vm_insert_page+0x7c0/0x7c0 [ 1482.525825] ? lock_downgrade+0x740/0x740 [ 1482.529992] handle_mm_fault+0x391/0x860 [ 1482.534063] __do_page_fault+0x549/0xad0 [ 1482.538132] ? spurious_fault+0x640/0x640 [ 1482.542283] ? do_page_fault+0x60/0x500 [ 1482.546263] ? page_fault+0x2f/0x50 [ 1482.549898] page_fault+0x45/0x50 [ 1482.553352] RIP: 0000:0x93f280 [ 1482.556532] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1482.577722] Mem-Info: [ 1482.585775] active_anon:13365 inactive_anon:6740 isolated_anon:0 [ 1482.585775] active_file:19 inactive_file:188 isolated_file:0 [ 1482.585775] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1482.585775] slab_reclaimable:22134 slab_unreclaimable:104872 [ 1482.585775] mapped:54738 shmem:6931 pagetables:729 bounce:0 [ 1482.585775] free:34493 free_pcp:220 free_cma:0 [ 1482.672184] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1482.689502] Node 0 active_anon:53460kB inactive_anon:26960kB active_file:268kB inactive_file:2556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220152kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1482.709753] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1482.742429] CPU: 0 PID: 12991 Comm: syz-executor.5 Not tainted 4.14.226-syzkaller #0 [ 1482.747392] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1482.750440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.750445] Call Trace: [ 1482.750465] dump_stack+0x1b2/0x281 [ 1482.750485] warn_alloc.cold+0x96/0x1cc [ 1482.795675] ? zone_watermark_ok_safe+0x220/0x220 [ 1482.800531] __alloc_pages_nodemask+0x2127/0x2720 [ 1482.805371] ? lock_acquire+0x170/0x3f0 [ 1482.809345] ? lock_acquire+0x170/0x3f0 [ 1482.813320] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1482.818169] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1482.823617] ? __mutex_unlock_slowpath+0x75/0x770 [ 1482.828477] alloc_pages_current+0x155/0x260 [ 1482.832883] ion_page_pool_alloc+0x118/0x1b0 [ 1482.837307] ion_system_heap_allocate+0x133/0x8c0 [ 1482.842152] ? _raw_spin_unlock+0x29/0x40 [ 1482.846297] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1482.851224] ? ion_system_contig_heap_create+0x130/0x130 [ 1482.856682] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1482.861699] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1482.866540] ion_alloc+0x27a/0x810 [ 1482.870080] ? ion_dma_buf_release+0x40/0x40 [ 1482.874484] ? __might_fault+0x177/0x1b0 [ 1482.878548] ion_ioctl+0xea/0x1f0 [ 1482.881999] ? ion_query_heaps+0x360/0x360 [ 1482.886233] ? ion_query_heaps+0x360/0x360 [ 1482.890548] do_vfs_ioctl+0x75a/0xff0 [ 1482.894341] ? ioctl_preallocate+0x1a0/0x1a0 [ 1482.898744] ? lock_downgrade+0x740/0x740 [ 1482.902902] ? __fget+0x225/0x360 [ 1482.906345] ? do_vfs_ioctl+0xff0/0xff0 [ 1482.910313] ? security_file_ioctl+0x83/0xb0 [ 1482.914715] SyS_ioctl+0x7f/0xb0 [ 1482.918076] ? do_vfs_ioctl+0xff0/0xff0 [ 1482.922068] do_syscall_64+0x1d5/0x640 [ 1482.925957] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1482.931231] RIP: 0033:0x465f69 [ 1482.934410] RSP: 002b:00007f3964351188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1482.942131] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1482.949397] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1482.956660] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1482.963927] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1482.971214] R13: 00007ffefc87680f R14: 00007f3964351300 R15: 0000000000022000 [ 1482.979252] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1483.008583] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1483.013744] Node 0 DMA32 free:58896kB min:36200kB low:45248kB high:54296kB active_anon:53460kB inactive_anon:26960kB active_file:300kB inactive_file:5028kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2916kB bounce:0kB free_pcp:640kB local_pcp:112kB free_cma:0kB [ 1483.043588] lowmem_reserve[]: 0 0 0 0 0 [ 1483.047654] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1483.113838] lowmem_reserve[]: 0 0 0 0 0 [ 1483.125553] Node 1 Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1483.162087] Mem-Info: [ 1483.164555] active_anon:13372 inactive_anon:6740 isolated_anon:0 [ 1483.164555] active_file:48 inactive_file:76 isolated_file:0 [ 1483.164555] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1483.164555] slab_reclaimable:22118 slab_unreclaimable:104552 [ 1483.164555] mapped:54800 shmem:6931 pagetables:742 bounce:0 [ 1483.164555] free:18822 free_pcp:199 free_cma:0 [ 1483.176719] lowmem_reserve[]: [ 1483.202977] Node 0 active_anon:53488kB inactive_anon:26960kB active_file:72kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:218800kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1483.206866] 0 0 0 0 0 [ 1483.236459] Node 0 DMA: 5*4kB (UE) 1*8kB (E) 5*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10988kB [ 1483.240749] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1483.253998] Node 0 DMA32: 2879*4kB (ME) 667*8kB (ME) 128*16kB (UME) 560*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36820kB [ 1483.410683] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1483.419020] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1483.446227] Node 1 Normal: 1170*4kB (U) 7*8kB (U) 1*16kB (U) 2*32kB (U) 0*64kB 0*128kB 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 5*4096kB (UM) = 26832kB [ 1483.486435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1483.495370] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1483.531173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1483.568613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1483.602212] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1483.615823] 6986 total pagecache pages [ 1483.635060] 0 pages in swap cache [ 1483.639075] Node 0 DMA32 free:36112kB min:36200kB low:45248kB high:54296kB active_anon:53488kB inactive_anon:26960kB active_file:120kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2968kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1483.639102] lowmem_reserve[]: 0 0 0 0 0 [ 1483.639123] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1483.639143] lowmem_reserve[]: 0 0 0 0 0 [ 1483.639164] Node 1 Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1483.639185] lowmem_reserve[]: 0 0 0 0 0 [ 1483.639204] Node 0 DMA: 5*4kB (UE) 1*8kB (E) 5*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10988kB [ 1483.639296] Node 0 DMA32: 2879*4kB (ME) 667*8kB (ME) 128*16kB (UME) 560*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36820kB [ 1483.639359] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1483.639410] Node 1 Normal: 1170*4kB (U) 7*8kB (U) 1*16kB (U) 2*32kB (U) 0*64kB 0*128kB 0*256kB 1*512kB (U) [ 1483.751611] Swap cache stats: add 0, delete 0, find 0/0 [ 1483.835742] Free swap = 0kB [ 1483.838855] Total swap = 0kB [ 1483.841871] 2097051 pages RAM [ 1483.845312] 0 pages HighMem/MovableOnly [ 1483.900854] 363840 pages reserved [ 1483.904328] 0 pages cma reserved [ 1483.931723] Out of memory (oom_kill_allocating_task): Kill process 7957 (syz-fuzzer) score 0 or sacrifice child [ 1483.984482] Killed process 7970 (syz-executor.1) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1484.051058] oom_reaper: reaped process 7970 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1484.061896] 1*1024kB (U) 0*2048kB 5*4096kB (UM) = 26832kB [ 1484.067648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1484.076491] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1484.086210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1484.095587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1484.104872] 7150 total pagecache pages [ 1484.109037] 0 pages in swap cache [ 1484.112576] Swap cache stats: add 0, delete 0, find 0/0 [ 1484.118366] Free swap = 0kB [ 1484.121379] Total swap = 0kB [ 1484.124432] 2097051 pages RAM [ 1484.127723] 0 pages HighMem/MovableOnly [ 1484.131691] 363840 pages reserved [ 1484.135143] 0 pages cma reserved [ 1484.251956] oom_reaper: reaped process 12980 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1484.277603] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1484.306817] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1484.311647] CPU: 1 PID: 7957 Comm: syz-fuzzer Not tainted 4.14.226-syzkaller #0 [ 1484.319106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.328561] Call Trace: [ 1484.331137] dump_stack+0x1b2/0x281 [ 1484.334756] dump_header+0x178/0x82f [ 1484.338467] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1484.343550] ? ___ratelimit+0x2cd/0x530 [ 1484.347507] oom_kill_process.cold+0x10/0xb18 [ 1484.351989] out_of_memory+0xe3e/0x1190 [ 1484.355976] ? oom_killer_disable+0x1c0/0x1c0 [ 1484.360466] ? mutex_trylock+0x152/0x1a0 [ 1484.364521] __alloc_pages_nodemask+0x23e1/0x2720 [ 1484.369376] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1484.374217] alloc_pages_current+0x155/0x260 [ 1484.378606] filemap_fault+0xea3/0x1980 [ 1484.382579] ext4_filemap_fault+0x84/0xb0 [ 1484.386709] __do_fault+0xfa/0x380 [ 1484.390227] __handle_mm_fault+0x2497/0x4620 [ 1484.394627] ? vm_insert_page+0x7c0/0x7c0 [ 1484.398769] ? free_object+0xe4/0x240 [ 1484.402554] handle_mm_fault+0x391/0x860 [ 1484.406611] __do_page_fault+0x549/0xad0 [ 1484.410671] ? spurious_fault+0x640/0x640 [ 1484.414799] ? do_page_fault+0x60/0x500 [ 1484.418766] ? page_fault+0x2f/0x50 [ 1484.422386] page_fault+0x45/0x50 [ 1484.425847] RIP: 0000:0x93f280 [ 1484.429023] RSP: 4e20:000000c00003df28 EFLAGS: 0043b6a0 [ 1484.429925] Mem-Info: [ 1484.437773] active_anon:13318 inactive_anon:6740 isolated_anon:0 [ 1484.437773] active_file:22 inactive_file:17 isolated_file:0 [ 1484.437773] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1484.437773] slab_reclaimable:22123 slab_unreclaimable:104634 [ 1484.437773] mapped:46022 shmem:6931 pagetables:722 bounce:0 [ 1484.437773] free:13977 free_pcp:0 free_cma:0 [ 1484.440682] syz-executor.4: [ 1484.473095] Node 0 active_anon:53272kB inactive_anon:26960kB active_file:0kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184088kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1484.503852] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1484.531697] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.560803] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1484.565871] Node 0 DMA32 free:17496kB min:36200kB low:45248kB high:54296kB active_anon:53372kB inactive_anon:26960kB active_file:264kB inactive_file:344kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2888kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.589939] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1484.596905] lowmem_reserve[]: 0 0 0 0 0 [ 1484.605341] syz-executor.5: [ 1484.609215] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.621726] page allocation failure: order:0 [ 1484.642324] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1484.648292] lowmem_reserve[]: 0 [ 1484.651886] CPU: 0 PID: 12980 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 1484.651894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.655160] 0 [ 1484.663024] Call Trace: [ 1484.663048] dump_stack+0x1b2/0x281 [ 1484.663061] warn_alloc.cold+0x96/0x1cc [ 1484.663073] ? zone_watermark_ok_safe+0x220/0x220 [ 1484.663083] ? usleep_range+0x130/0x130 [ 1484.663091] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1484.663102] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1484.663113] ? run_timer_softirq+0x5a0/0x5a0 [ 1484.663129] __alloc_pages_nodemask+0x2127/0x2720 [ 1484.663145] ? lock_acquire+0x170/0x3f0 [ 1484.663158] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1484.663170] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1484.663184] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1484.683104] 0 [ 1484.684458] ? check_preemption_disabled+0x35/0x240 [ 1484.693648] 0 [ 1484.698344] alloc_pages_current+0x155/0x260 [ 1484.698361] ion_page_pool_alloc+0x118/0x1b0 [ 1484.698372] ion_system_heap_allocate+0x133/0x8c0 [ 1484.698383] ? ion_alloc+0x187/0x810 [ 1484.698393] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1484.698403] ? ion_system_contig_heap_create+0x130/0x130 [ 1484.698414] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1484.698425] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1484.712901] 0 [ 1484.716629] ion_alloc+0x204/0x810 [ 1484.725939] ? ion_dma_buf_release+0x40/0x40 [ 1484.741870] Node 1 [ 1484.744863] ? __might_fault+0x177/0x1b0 [ 1484.753379] Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.754100] ion_ioctl+0xea/0x1f0 [ 1484.763995] lowmem_reserve[]: [ 1484.768671] ? ion_query_heaps+0x360/0x360 [ 1484.768683] ? ion_query_heaps+0x360/0x360 [ 1484.768695] do_vfs_ioctl+0x75a/0xff0 [ 1484.768706] ? ioctl_preallocate+0x1a0/0x1a0 [ 1484.768715] ? lock_downgrade+0x740/0x740 [ 1484.768736] ? __fget+0x225/0x360 [ 1484.768745] ? do_vfs_ioctl+0xff0/0xff0 [ 1484.768755] ? security_file_ioctl+0x83/0xb0 [ 1484.768765] SyS_ioctl+0x7f/0xb0 [ 1484.782800] 0 [ 1484.783909] ? do_vfs_ioctl+0xff0/0xff0 [ 1484.791740] 0 [ 1484.794579] do_syscall_64+0x1d5/0x640 [ 1484.831788] 0 [ 1484.831961] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1484.836161] 0 [ 1484.839947] RIP: 0033:0x465f69 [ 1484.839951] RSP: 002b:00007f9a160a9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1484.839960] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1484.839965] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1484.839970] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1484.839974] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1484.839979] R13: 00007ffd4863bc0f R14: 00007f9a160a9300 R15: 0000000000022000 [ 1484.860102] Mem-Info: [ 1484.864821] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1484.865641] active_anon:13318 inactive_anon:6740 isolated_anon:0 [ 1484.865641] active_file:22 inactive_file:13 isolated_file:0 [ 1484.865641] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1484.865641] slab_reclaimable:22123 slab_unreclaimable:104634 [ 1484.865641] mapped:46022 shmem:6931 pagetables:722 bounce:0 [ 1484.865641] free:13822 free_pcp:0 free_cma:0 [ 1484.869637] (null) [ 1484.869643] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1484.869666] CPU: 1 PID: 12991 Comm: syz-executor.5 Not tainted 4.14.226-syzkaller #0 [ 1484.869671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.869675] Call Trace: [ 1484.869696] dump_stack+0x1b2/0x281 [ 1484.869711] warn_alloc.cold+0x96/0x1cc [ 1484.869723] ? zone_watermark_ok_safe+0x220/0x220 [ 1484.869733] ? usleep_range+0x130/0x130 [ 1484.869742] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1484.869755] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1484.869766] ? run_timer_softirq+0x5a0/0x5a0 [ 1484.882443] Node 0 active_anon:53272kB inactive_anon:26960kB active_file:84kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184088kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1484.882524] __alloc_pages_nodemask+0x2127/0x2720 [ 1484.884305] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1484.887485] ? lock_acquire+0x170/0x3f0 [ 1484.887500] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1484.887518] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1484.887536] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1484.895228] Node 0 [ 1484.902587] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 1484.902604] alloc_pages_current+0x155/0x260 [ 1484.909909] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.917139] ion_page_pool_alloc+0x118/0x1b0 [ 1484.917151] ion_system_heap_allocate+0x133/0x8c0 [ 1484.917164] ? _raw_spin_unlock+0x29/0x40 [ 1484.924427] lowmem_reserve[]: [ 1484.931890] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1484.931900] ? ion_system_contig_heap_create+0x130/0x130 [ 1484.931912] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1484.931923] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1484.931934] ion_alloc+0x27a/0x810 [ 1484.935026] 0 [ 1484.942156] ? ion_dma_buf_release+0x40/0x40 [ 1484.942169] ? __might_fault+0x177/0x1b0 [ 1484.942181] ion_ioctl+0xea/0x1f0 [ 1484.942191] ? ion_query_heaps+0x360/0x360 [ 1484.942220] ? ion_query_heaps+0x360/0x360 [ 1484.975151] 2717 [ 1484.977245] do_vfs_ioctl+0x75a/0xff0 [ 1484.977260] ? ioctl_preallocate+0x1a0/0x1a0 [ 1484.982357] 2718 [ 1484.990256] ? lock_downgrade+0x740/0x740 [ 1484.990270] ? __fget+0x225/0x360 [ 1484.990279] ? do_vfs_ioctl+0xff0/0xff0 [ 1484.990289] ? security_file_ioctl+0x83/0xb0 [ 1484.990300] SyS_ioctl+0x7f/0xb0 [ 1484.999699] 2718 [ 1485.002246] ? do_vfs_ioctl+0xff0/0xff0 [ 1485.005844] 2718 [ 1485.009814] do_syscall_64+0x1d5/0x640 [ 1485.009832] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1485.009841] RIP: 0033:0x465f69 [ 1485.009845] RSP: 002b:00007f3964351188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1485.018755] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1485.018761] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1485.018766] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1485.018771] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1485.018776] R13: 00007ffefc87680f R14: 00007f3964351300 R15: 0000000000022000 [ 1485.027850] 0 [ 1485.041977] Node 0 [ 1485.108429] DMA32 free:18176kB min:36200kB low:45248kB high:54296kB active_anon:53264kB inactive_anon:26960kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2796kB bounce:0kB free_pcp:0kB local_pcp:192kB free_cma:0kB [ 1485.119898] Node 0 [ 1485.137682] lowmem_reserve[]: [ 1485.175976] DMA: [ 1485.184514] 0 [ 1485.198235] 2*4kB [ 1485.208930] 0 [ 1485.224597] (UE) [ 1485.246694] 0 [ 1485.326746] 1*8kB [ 1485.357047] 0 0 [ 1485.410822] (E) 4*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10960kB [ 1485.415462] Node 0 [ 1485.444696] Node 0 [ 1485.446710] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1485.447203] DMA32: [ 1485.453288] lowmem_reserve[]: 0 0 0 0 0 [ 1485.535505] Node 1 Normal free:485976kB min:53696kB low:67120kB high:80544kB active_anon:300kB inactive_anon:0kB active_file:504kB inactive_file:8000kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:148kB bounce:0kB free_pcp:88kB local_pcp:32kB free_cma:0kB [ 1485.596775] 3593*4kB (UME) 969*8kB (UME) 315*16kB (UME) 112*32kB (UM) 409*64kB (U) 9*128kB (U) 9*256kB (U) 6*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 64476kB [ 1485.636721] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1485.642072] lowmem_reserve[]: [ 1485.656959] Node 1 Normal: 891*4kB (U) 2*8kB (UM) 2*16kB (UM) 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (M) 178*1024kB (UM) 119*2048kB (UM) 39*4096kB (U) = 590396kB [ 1485.669048] 0 0 0 0 0 [ 1485.699536] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 4*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10960kB [ 1485.725459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1485.746769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1485.755378] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1485.768572] Node 0 DMA32: 3675*4kB (UME) 860*8kB (UME) 412*16kB (UME) 486*32kB (UME) 2177*64kB (UM) 348*128kB (U) 18*256kB (U) 7*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 236812kB [ 1485.811900] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1485.822953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1485.850370] 9222 total pagecache pages [ 1485.852510] Node 1 [ 1485.854325] 0 pages in swap cache [ 1485.854331] Swap cache stats: add 0, delete 0, find 0/0 [ 1485.854334] Free swap = 0kB [ 1485.854338] Total swap = 0kB [ 1485.854344] 2097051 pages RAM [ 1485.854348] 0 pages HighMem/MovableOnly [ 1485.854351] 363840 pages reserved [ 1485.854354] 0 pages cma reserved [ 1485.854361] Out of memory (oom_kill_allocating_task): Kill process 7957 (syz-fuzzer) score 0 or sacrifice child [ 1485.854429] Killed process 7968 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1485.916702] Normal: 891*4kB (U) 2*8kB (UM) 2*16kB (UM) 1*32kB (U) 14*64kB (U) 6*128kB (U) 2*256kB (U) 2*512kB (UM) 178*1024kB (UM) 121*2048kB (UM) 39*4096kB (U) = 596668kB [ 1485.954023] oom_reaper: reaped process 7968 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1486.005064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1486.015261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1486.060621] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1486.084901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1486.100465] 10237 total pagecache pages [ 1486.112302] 0 pages in swap cache [ 1486.132057] Swap cache stats: add 0, delete 0, find 0/0 [ 1486.175035] Free swap = 0kB [ 1486.181766] Total swap = 0kB [ 1486.184829] 2097051 pages RAM [ 1486.195213] 0 pages HighMem/MovableOnly [ 1486.203691] 363840 pages reserved [ 1486.210326] 0 pages cma reserved [ 1486.309986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1486.320238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1486.347082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1486.366788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.382547] device bridge_slave_1 left promiscuous mode [ 1486.398066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.425290] device bridge_slave_0 left promiscuous mode [ 1486.456986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.492422] device veth1_macvtap left promiscuous mode [ 1486.499219] device veth0_macvtap left promiscuous mode [ 1486.504569] device veth1_vlan left promiscuous mode [ 1486.511814] device veth0_vlan left promiscuous mode [ 1486.751876] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1486.786152] device hsr_slave_1 left promiscuous mode [ 1486.796690] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1486.801893] CPU: 1 PID: 12980 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 1486.809785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1486.819149] Call Trace: [ 1486.821737] dump_stack+0x1b2/0x281 [ 1486.825360] warn_alloc.cold+0x96/0x1cc [ 1486.829356] ? zone_watermark_ok_safe+0x220/0x220 [ 1486.834213] __alloc_pages_nodemask+0x2127/0x2720 [ 1486.839058] ? lock_acquire+0x170/0x3f0 [ 1486.843061] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1486.848045] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1486.853497] ? __mutex_unlock_slowpath+0x75/0x770 [ 1486.858352] ? retint_kernel+0x2d/0x2d [ 1486.862257] alloc_pages_current+0x155/0x260 [ 1486.867205] ion_page_pool_alloc+0x118/0x1b0 [ 1486.871621] ion_system_heap_allocate+0x133/0x8c0 [ 1486.876540] ? _raw_spin_unlock+0x29/0x40 [ 1486.880687] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1486.885701] ? ion_system_contig_heap_create+0x130/0x130 [ 1486.891169] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1486.896191] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1486.901148] ion_alloc+0x27a/0x810 [ 1486.904694] ? ion_dma_buf_release+0x40/0x40 [ 1486.909100] ? __might_fault+0x177/0x1b0 [ 1486.913158] ion_ioctl+0xea/0x1f0 [ 1486.916620] ? ion_query_heaps+0x360/0x360 [ 1486.920871] ? ion_query_heaps+0x360/0x360 [ 1486.925108] do_vfs_ioctl+0x75a/0xff0 [ 1486.928906] ? ioctl_preallocate+0x1a0/0x1a0 [ 1486.933317] ? lock_downgrade+0x740/0x740 [ 1486.937543] ? __fget+0x225/0x360 [ 1486.940986] ? do_vfs_ioctl+0xff0/0xff0 [ 1486.944950] ? security_file_ioctl+0x83/0xb0 [ 1486.949350] SyS_ioctl+0x7f/0xb0 [ 1486.952712] ? do_vfs_ioctl+0xff0/0xff0 [ 1486.956675] do_syscall_64+0x1d5/0x640 [ 1486.960563] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1486.965739] RIP: 0033:0x465f69 [ 1486.968928] RSP: 002b:00007f9a160a9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1486.976626] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1486.983887] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1486.991234] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1486.998494] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1487.005779] R13: 00007ffd4863bc0f R14: 00007f9a160a9300 R15: 0000000000022000 [ 1487.028078] device hsr_slave_0 left promiscuous mode [ 1487.092480] team0 (unregistering): Port device team_slave_1 removed [ 1487.097968] warn_alloc_show_mem: 1 callbacks suppressed [ 1487.097972] Mem-Info: [ 1487.111784] team0 (unregistering): Port device team_slave_0 removed [ 1487.122053] active_anon:13640 inactive_anon:6737 isolated_anon:0 [ 1487.122053] active_file:565 inactive_file:1999 isolated_file:0 [ 1487.122053] unevictable:0 dirty:63 writeback:0 unstable:0 [ 1487.122053] slab_reclaimable:21717 slab_unreclaimable:105314 [ 1487.122053] mapped:38836 shmem:6924 pagetables:669 bounce:0 [ 1487.122053] free:62071 free_pcp:395 free_cma:0 [ 1487.168994] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1487.184403] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1487.202444] Node 0 active_anon:54560kB inactive_anon:26948kB active_file:2244kB inactive_file:8028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155416kB dirty:248kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1487.254239] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1487.262955] bond0 (unregistering): Released all slaves [ 1487.280411] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1487.312107] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1487.320519] Node 0 DMA32 free:204984kB min:36200kB low:45248kB high:54296kB active_anon:54460kB inactive_anon:26948kB active_file:2244kB inactive_file:8428kB unevictable:0kB writepending:248kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2528kB bounce:0kB free_pcp:1192kB local_pcp:696kB free_cma:0kB [ 1487.350555] lowmem_reserve[]: 0 0 0 0 0 [ 1487.354666] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1487.381047] lowmem_reserve[]: 0 0 0 0 0 [ 1487.385121] Node 1 Normal free:33976kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:356kB inactive_file:120kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:732kB local_pcp:0kB free_cma:0kB [ 1487.413112] lowmem_reserve[]: 0 0 0 0 0 [ 1487.417232] Node 0 DMA: 2*4kB (UE) 14*8kB (UE) 7*16kB (U) 4*32kB (UE) 4*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10984kB [ 1487.432696] Node 0 DMA32: 6295*4kB (UME) 3077*8kB (UME) 3526*16kB (UE) 3087*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 205188kB [ 1487.447540] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1487.458708] Node 1 Normal: 179*4kB (UM) 506*8kB (UM) 336*16kB (UM) 143*32kB (UM) 41*64kB (UM) 14*128kB (UM) 5*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 3*4096kB (UM) = 34236kB [ 1487.474906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1487.484197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1487.493002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1487.502026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1487.510901] 10040 total pagecache pages [ 1487.514885] 0 pages in swap cache [ 1487.518650] Swap cache stats: add 0, delete 0, find 0/0 [ 1487.524332] Free swap = 0kB [ 1487.527594] Total swap = 0kB [ 1487.530619] 2097051 pages RAM [ 1487.533969] 0 pages HighMem/MovableOnly [ 1487.538103] 363840 pages reserved [ 1487.541671] 0 pages cma reserved 03:04:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000003, 0x2f}) 03:04:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x105, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000100)={0xa, 0xd2e0, 0x3}) 03:04:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f}) 03:04:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f}) 03:04:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xc001, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000140)) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) 03:04:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2b, 0x0, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x131}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9810}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x7) 03:04:42 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40000000fd, 0x2f}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x20, 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 03:04:43 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f}) [ 1488.909159] Disabling bearer [ 1488.947294] Disabling bearer [ 1488.963979] FAULT_INJECTION: forcing a failure. [ 1488.963979] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.975862] Left network mode [ 1489.010667] CPU: 0 PID: 13042 Comm: syz-executor.3 Not tainted 4.14.226-syzkaller #0 [ 1489.021207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.030583] Call Trace: [ 1489.033186] dump_stack+0x1b2/0x281 [ 1489.036830] should_fail.cold+0x10a/0x149 [ 1489.040996] should_failslab+0xd6/0x130 [ 1489.045001] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1489.049777] ion_alloc+0x187/0x810 [ 1489.053340] ? ion_dma_buf_release+0x40/0x40 [ 1489.057753] ? __might_fault+0x177/0x1b0 [ 1489.061827] ion_ioctl+0xea/0x1f0 [ 1489.065290] ? ion_query_heaps+0x360/0x360 [ 1489.069529] ? SyS_write+0x1b7/0x210 [ 1489.073267] ? ion_query_heaps+0x360/0x360 [ 1489.077509] do_vfs_ioctl+0x75a/0xff0 [ 1489.081318] ? ioctl_preallocate+0x1a0/0x1a0 [ 1489.085738] ? lock_downgrade+0x740/0x740 [ 1489.089907] ? __fget+0x225/0x360 [ 1489.093395] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.097415] ? security_file_ioctl+0x83/0xb0 [ 1489.101836] SyS_ioctl+0x7f/0xb0 [ 1489.105245] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.109241] do_syscall_64+0x1d5/0x640 [ 1489.113145] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1489.118346] RIP: 0033:0x465f69 [ 1489.121575] RSP: 002b:00007f09f39ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.129296] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1489.136585] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1489.143946] RBP: 00007f09f39ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1489.151426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.158701] R13: 00007ffd9007748f R14: 00007f09f39ef300 R15: 0000000000022000 03:04:43 executing program 3 (fault-call:1 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f}) [ 1489.433699] FAULT_INJECTION: forcing a failure. [ 1489.433699] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1489.465188] CPU: 0 PID: 13044 Comm: syz-executor.3 Not tainted 4.14.226-syzkaller #0 [ 1489.473312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.482691] Call Trace: [ 1489.485335] dump_stack+0x1b2/0x281 [ 1489.488984] should_fail.cold+0x10a/0x149 [ 1489.493170] __alloc_pages_nodemask+0x22c/0x2720 [ 1489.497949] ? lock_acquire+0x170/0x3f0 [ 1489.501981] ? ion_page_pool_alloc+0x28/0x1b0 [ 1489.506503] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1489.511369] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1489.515901] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1489.521375] ? __mutex_unlock_slowpath+0x75/0x770 [ 1489.526280] alloc_pages_current+0x155/0x260 [ 1489.530741] ion_page_pool_alloc+0x118/0x1b0 [ 1489.535304] ion_system_heap_allocate+0x133/0x8c0 [ 1489.540209] ? ion_alloc+0x187/0x810 [ 1489.543958] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1489.549439] ? ion_system_contig_heap_create+0x130/0x130 [ 1489.554929] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1489.560580] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1489.565459] ion_alloc+0x204/0x810 [ 1489.569030] ? ion_dma_buf_release+0x40/0x40 [ 1489.573687] ? __might_fault+0x177/0x1b0 [ 1489.577819] ion_ioctl+0xea/0x1f0 [ 1489.581304] ? ion_query_heaps+0x360/0x360 [ 1489.585561] ? SyS_write+0x1b7/0x210 [ 1489.589659] ? ion_query_heaps+0x360/0x360 [ 1489.593915] do_vfs_ioctl+0x75a/0xff0 [ 1489.597908] ? ioctl_preallocate+0x1a0/0x1a0 [ 1489.602338] ? lock_downgrade+0x740/0x740 [ 1489.606597] ? __fget+0x225/0x360 [ 1489.610180] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.614267] ? security_file_ioctl+0x83/0xb0 [ 1489.618697] SyS_ioctl+0x7f/0xb0 [ 1489.622085] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.626111] do_syscall_64+0x1d5/0x640 [ 1489.630118] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1489.635326] RIP: 0033:0x465f69 [ 1489.638524] RSP: 002b:00007f09f39ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.646603] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1489.653885] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1489.661178] RBP: 00007f09f39ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1489.668470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.676714] R13: 00007ffd9007748f R14: 00007f09f39ef300 R15: 0000000000022000 [ 1489.790009] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1489.790211] syz-executor.2: [ 1489.805350] syz-executor.5: [ 1489.812209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.815346] page allocation failure: order:4 [ 1489.815464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.833554] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1489.835317] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1489.844191] syz-executor.4 cpuset= [ 1489.851580] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1489.858501] (null) [ 1489.860674] / mems_allowed=0-1 [ 1489.865556] syz-executor.2 cpuset=/ [ 1489.865658] CPU: 1 PID: 13035 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 1489.865666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.865669] Call Trace: [ 1489.865685] dump_stack+0x1b2/0x281 [ 1489.865698] warn_alloc.cold+0x96/0x1cc [ 1489.865709] ? zone_watermark_ok_safe+0x220/0x220 [ 1489.865732] __alloc_pages_nodemask+0x2127/0x2720 [ 1489.882194] mems_allowed=0-1 [ 1489.886915] ? lock_acquire+0x170/0x3f0 [ 1489.886933] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1489.886952] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1489.928135] ? __mutex_unlock_slowpath+0x75/0x770 [ 1489.932990] alloc_pages_current+0x155/0x260 [ 1489.937402] ion_page_pool_alloc+0x118/0x1b0 [ 1489.941816] ion_system_heap_allocate+0x133/0x8c0 [ 1489.946658] ? ion_alloc+0x187/0x810 [ 1489.950392] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1489.956557] ? ion_system_contig_heap_create+0x130/0x130 [ 1489.962624] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1489.967646] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1489.972510] ion_alloc+0x204/0x810 [ 1489.976061] ? ion_dma_buf_release+0x40/0x40 [ 1489.980485] ? __might_fault+0x177/0x1b0 [ 1489.984549] ion_ioctl+0xea/0x1f0 [ 1489.988023] ? ion_query_heaps+0x360/0x360 [ 1489.992259] ? ion_query_heaps+0x360/0x360 [ 1489.996499] do_vfs_ioctl+0x75a/0xff0 [ 1490.000302] ? ioctl_preallocate+0x1a0/0x1a0 [ 1490.004708] ? lock_downgrade+0x740/0x740 [ 1490.008861] ? __fget+0x225/0x360 [ 1490.012310] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.016292] ? security_file_ioctl+0x83/0xb0 [ 1490.020694] SyS_ioctl+0x7f/0xb0 [ 1490.024053] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.028030] do_syscall_64+0x1d5/0x640 [ 1490.031949] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1490.037132] RIP: 0033:0x465f69 [ 1490.040312] RSP: 002b:00007f9a160a9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.048017] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1490.055291] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1490.062561] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1490.069833] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1490.077107] R13: 00007ffd4863bc0f R14: 00007f9a160a9300 R15: 0000000000022000 [ 1490.084388] CPU: 0 PID: 13030 Comm: syz-executor.2 Not tainted 4.14.226-syzkaller #0 [ 1490.088977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1490.092277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.106820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.108295] Call Trace: [ 1490.117263] dump_stack+0x1b2/0x281 [ 1490.120887] warn_alloc.cold+0x96/0x1cc [ 1490.124856] ? zone_watermark_ok_safe+0x220/0x220 [ 1490.129706] __alloc_pages_nodemask+0x2127/0x2720 [ 1490.134559] ? lock_acquire+0x170/0x3f0 [ 1490.138531] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1490.143415] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1490.148864] ? __mutex_unlock_slowpath+0x75/0x770 [ 1490.153717] alloc_pages_current+0x155/0x260 [ 1490.158173] ion_page_pool_alloc+0x118/0x1b0 [ 1490.162575] ion_system_heap_allocate+0x133/0x8c0 [ 1490.167431] ? ion_alloc+0x187/0x810 [ 1490.171137] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1490.176601] ? ion_system_contig_heap_create+0x130/0x130 [ 1490.182071] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1490.187083] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1490.191922] ion_alloc+0x204/0x810 [ 1490.195836] ? ion_dma_buf_release+0x40/0x40 [ 1490.200267] ? __might_fault+0x177/0x1b0 [ 1490.204333] ion_ioctl+0xea/0x1f0 [ 1490.207796] ? ion_query_heaps+0x360/0x360 [ 1490.212151] ? ion_query_heaps+0x360/0x360 [ 1490.216510] do_vfs_ioctl+0x75a/0xff0 [ 1490.220318] ? ioctl_preallocate+0x1a0/0x1a0 [ 1490.224733] ? lock_downgrade+0x740/0x740 [ 1490.228879] ? __fget+0x225/0x360 [ 1490.232324] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.236639] ? security_file_ioctl+0x83/0xb0 [ 1490.241060] SyS_ioctl+0x7f/0xb0 [ 1490.244424] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.248405] do_syscall_64+0x1d5/0x640 [ 1490.252324] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1490.257520] RIP: 0033:0x465f69 [ 1490.260730] RSP: 002b:00007f51b8dd6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.268431] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1490.275703] RDX: 0000000020000240 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1490.282988] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1490.290259] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1490.297543] R13: 00007ffd73bd643f R14: 00007f51b8dd6300 R15: 0000000000022000 [ 1490.307106] device bridge_slave_1 left promiscuous mode [ 1490.316869] CPU: 1 PID: 13034 Comm: syz-executor.5 Not tainted 4.14.226-syzkaller #0 [ 1490.324798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.334363] Call Trace: [ 1490.336954] dump_stack+0x1b2/0x281 [ 1490.340611] warn_alloc.cold+0x96/0x1cc [ 1490.344588] ? zone_watermark_ok_safe+0x220/0x220 [ 1490.349453] __alloc_pages_nodemask+0x2127/0x2720 [ 1490.354347] ? __schedule+0x893/0x1de0 [ 1490.358251] ? lock_acquire+0x170/0x3f0 [ 1490.362247] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1490.367101] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1490.372561] ? __mutex_unlock_slowpath+0x75/0x770 [ 1490.377414] alloc_pages_current+0x155/0x260 [ 1490.381833] ion_page_pool_alloc+0x118/0x1b0 [ 1490.386253] ion_system_heap_allocate+0x133/0x8c0 [ 1490.391099] ? ion_alloc+0x187/0x810 [ 1490.394816] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1490.400297] ? ion_system_contig_heap_create+0x130/0x130 [ 1490.405749] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1490.410772] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1490.415612] ion_alloc+0x204/0x810 [ 1490.419154] ? ion_dma_buf_release+0x40/0x40 [ 1490.423568] ? __might_fault+0x177/0x1b0 [ 1490.427635] ion_ioctl+0xea/0x1f0 [ 1490.431085] ? ion_query_heaps+0x360/0x360 [ 1490.435321] ? ion_query_heaps+0x360/0x360 [ 1490.439557] do_vfs_ioctl+0x75a/0xff0 [ 1490.443362] ? ioctl_preallocate+0x1a0/0x1a0 [ 1490.447781] ? lock_downgrade+0x740/0x740 [ 1490.451933] ? __fget+0x225/0x360 [ 1490.455384] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.459357] ? security_file_ioctl+0x83/0xb0 [ 1490.463765] SyS_ioctl+0x7f/0xb0 [ 1490.467127] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.471100] do_syscall_64+0x1d5/0x640 [ 1490.474998] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1490.480206] RIP: 0033:0x465f69 [ 1490.483479] RSP: 002b:00007f3964351188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.491360] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1490.500209] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1490.507487] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1490.514783] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1490.522057] R13: 00007ffefc87680f R14: 00007f3964351300 R15: 0000000000022000 [ 1490.531138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.556175] device bridge_slave_0 left promiscuous mode [ 1490.561876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.569033] Mem-Info: [ 1490.576962] active_anon:14393 inactive_anon:6737 isolated_anon:0 [ 1490.576962] active_file:406 inactive_file:6479 isolated_file:0 [ 1490.576962] unevictable:0 dirty:64 writeback:0 unstable:0 [ 1490.576962] slab_reclaimable:21469 slab_unreclaimable:105230 [ 1490.576962] mapped:50140 shmem:6924 pagetables:743 bounce:0 [ 1490.576962] free:105027 free_pcp:226 free_cma:0 [ 1490.613513] device veth1_macvtap left promiscuous mode [ 1490.626725] device veth0_macvtap left promiscuous mode [ 1490.632076] device veth1_vlan left promiscuous mode [ 1490.646742] device veth0_vlan left promiscuous mode [ 1490.696689] Node 0 active_anon:57364kB inactive_anon:26948kB active_file:2032kB inactive_file:8792kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:224668kB dirty:168kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1490.755293] Node 1 active_anon:208kB inactive_anon:0kB active_file:492kB inactive_file:15956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10692kB dirty:88kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1490.782929] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1490.809269] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1490.824397] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1490.829622] CPU: 1 PID: 13044 Comm: syz-executor.3 Not tainted 4.14.226-syzkaller #0 [ 1490.837521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.846877] Call Trace: [ 1490.849505] dump_stack+0x1b2/0x281 [ 1490.853167] warn_alloc.cold+0x96/0x1cc [ 1490.857149] ? zone_watermark_ok_safe+0x220/0x220 [ 1490.862014] __alloc_pages_nodemask+0x2127/0x2720 [ 1490.866873] ? lock_acquire+0x170/0x3f0 [ 1490.870860] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1490.875755] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1490.881219] ? __mutex_unlock_slowpath+0x75/0x770 [ 1490.886077] alloc_pages_current+0x155/0x260 [ 1490.890514] ion_page_pool_alloc+0x118/0x1b0 [ 1490.894922] ion_system_heap_allocate+0x133/0x8c0 [ 1490.899771] ? ion_alloc+0x187/0x810 [ 1490.903587] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1490.909050] ? ion_system_contig_heap_create+0x130/0x130 [ 1490.914518] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1490.919532] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1490.924381] ion_alloc+0x204/0x810 [ 1490.927921] ? ion_dma_buf_release+0x40/0x40 [ 1490.932330] ? __might_fault+0x177/0x1b0 [ 1490.936389] ion_ioctl+0xea/0x1f0 [ 1490.939837] ? ion_query_heaps+0x360/0x360 [ 1490.944079] ? SyS_write+0x1b7/0x210 [ 1490.947812] ? ion_query_heaps+0x360/0x360 [ 1490.952074] do_vfs_ioctl+0x75a/0xff0 [ 1490.955881] ? ioctl_preallocate+0x1a0/0x1a0 [ 1490.960297] ? lock_downgrade+0x740/0x740 [ 1490.964480] ? __fget+0x225/0x360 [ 1490.967949] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.973101] ? security_file_ioctl+0x83/0xb0 [ 1490.977516] SyS_ioctl+0x7f/0xb0 [ 1490.980968] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.984942] do_syscall_64+0x1d5/0x640 [ 1490.988854] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1490.994046] RIP: 0033:0x465f69 [ 1490.997242] RSP: 002b:00007f09f39ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1491.005217] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1491.012486] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1491.019753] RBP: 00007f09f39ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1491.027038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.034319] R13: 00007ffd9007748f R14: 00007f09f39ef300 R15: 0000000000022000 [ 1491.066632] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1491.071713] Node 0 DMA32 free:35940kB min:36200kB low:45248kB high:54296kB active_anon:57164kB inactive_anon:26948kB active_file:2028kB inactive_file:1764kB unevictable:0kB writepending:180kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2836kB bounce:0kB free_pcp:696kB local_pcp:60kB free_cma:0kB [ 1491.141755] lowmem_reserve[]: 0 0 0 0 0 [ 1491.145796] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1491.188221] device hsr_slave_1 left promiscuous mode [ 1491.209437] device hsr_slave_0 left promiscuous mode [ 1491.240857] lowmem_reserve[]: 0 0 0 0 0 [ 1491.248134] team0 (unregistering): Port device team_slave_1 removed [ 1491.254876] Node 1 Normal free:55016kB min:53696kB low:67120kB high:80544kB active_anon:208kB inactive_anon:0kB active_file:0kB inactive_file:600kB unevictable:0kB writepending:92kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:1076kB local_pcp:656kB free_cma:0kB [ 1491.291666] team0 (unregistering): Port device team_slave_0 removed [ 1491.302606] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1491.314578] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1491.324950] lowmem_reserve[]: 0 0 0 0 0 [ 1491.329749] Node 0 DMA: 2*4kB (UE) 7*8kB (UE) 7*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11056kB [ 1491.360651] Node 0 DMA32: 3086*4kB (UME) 1222*8kB (UME) 230*16kB (UME) 356*32kB (UME) 2*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37448kB [ 1491.392572] bond0 (unregistering): Released all slaves [ 1491.398004] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1491.417043] Node 1 Normal: 15*4kB (UM) 14*8kB (M) 9*16kB (UM) 12*32kB (UM) 15*64kB (UM) 11*128kB (UM) 5*256kB (UM) 4*512kB (M) 3*1024kB (UM) 2*2048kB (M) 10*4096kB (UM) = 54524kB [ 1491.439893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1491.448885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1491.458508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1491.467871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1491.476509] 7239 total pagecache pages [ 1491.494764] 0 pages in swap cache [ 1491.502559] Swap cache stats: add 0, delete 0, find 0/0 [ 1491.547580] Free swap = 0kB [ 1491.550634] Total swap = 0kB [ 1491.553649] 2097051 pages RAM [ 1491.616695] 0 pages HighMem/MovableOnly [ 1491.620697] 363840 pages reserved [ 1491.655163] 0 pages cma reserved [ 1491.978742] rs:main Q:Reg invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1492.136402] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1492.192466] CPU: 1 PID: 13028 Comm: rs:main Q:Reg Not tainted 4.14.226-syzkaller #0 [ 1492.200292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1492.210012] Call Trace: [ 1492.212612] dump_stack+0x1b2/0x281 [ 1492.216238] dump_header+0x178/0x82f [ 1492.219950] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1492.225050] ? ___ratelimit+0x2cd/0x530 [ 1492.229045] oom_kill_process.cold+0x10/0xb18 [ 1492.233548] out_of_memory+0xe3e/0x1190 [ 1492.237523] ? oom_killer_disable+0x1c0/0x1c0 [ 1492.242034] ? mutex_trylock+0x152/0x1a0 [ 1492.246095] __alloc_pages_nodemask+0x23e1/0x2720 [ 1492.250953] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1492.255832] alloc_pages_current+0x155/0x260 [ 1492.260245] filemap_fault+0xea3/0x1980 [ 1492.264232] ext4_filemap_fault+0x84/0xb0 [ 1492.268377] __do_fault+0xfa/0x380 [ 1492.271915] __handle_mm_fault+0x2497/0x4620 [ 1492.276322] ? vm_insert_page+0x7c0/0x7c0 [ 1492.280467] ? lock_downgrade+0x740/0x740 [ 1492.284613] ? vfs_write+0x35d/0x4d0 [ 1492.288340] handle_mm_fault+0x391/0x860 [ 1492.292402] __do_page_fault+0x549/0xad0 [ 1492.296464] ? spurious_fault+0x640/0x640 [ 1492.300621] ? do_page_fault+0x60/0x500 [ 1492.304593] ? page_fault+0x2f/0x50 [ 1492.308221] page_fault+0x45/0x50 [ 1492.311667] RIP: 0000:0x5644fd1b43a0 [ 1492.315396] RSP: fd1b9e10:000000000000004c EFLAGS: 7f7704030ec0 [ 1493.461046] Mem-Info: [ 1493.535619] active_anon:14437 inactive_anon:6737 isolated_anon:0 [ 1493.535619] active_file:33 inactive_file:12 isolated_file:0 [ 1493.535619] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1493.535619] slab_reclaimable:21259 slab_unreclaimable:103928 [ 1493.535619] mapped:54816 shmem:6924 pagetables:810 bounce:0 [ 1493.535619] free:25206 free_pcp:6 free_cma:0 [ 1493.842209] Node 0 active_anon:57540kB inactive_anon:26948kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219260kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1494.099340] Node 1 active_anon:208kB inactive_anon:0kB active_file:0kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1494.195008] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1494.266354] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1494.301037] Node 0 DMA32 free:35872kB min:36200kB low:45248kB high:54296kB active_anon:57540kB inactive_anon:26948kB active_file:0kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:3104kB bounce:0kB free_pcp:504kB local_pcp:244kB free_cma:0kB [ 1494.345129] lowmem_reserve[]: 0 0 0 0 0 [ 1494.355392] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1494.399717] lowmem_reserve[]: 0 0 0 0 0 [ 1494.403746] Node 1 Normal free:53120kB min:53696kB low:67120kB high:80544kB active_anon:208kB inactive_anon:0kB active_file:0kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:136kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1494.452919] lowmem_reserve[]: 0 0 0 0 0 [ 1494.465956] Node 0 DMA: 2*4kB (UE) 7*8kB (UE) 7*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11056kB [ 1494.502837] Node 0 DMA32: 3413*4kB (UME) 1241*8kB (UME) 237*16kB (ME) 253*32kB (UME) 2*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35724kB [ 1494.542407] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1494.573766] Node 1 Normal: 12*4kB (M) 14*8kB (M) 8*16kB (UM) 11*32kB (UM) 14*64kB (UM) 9*128kB (M) 5*256kB (M) 4*512kB (M) 2*1024kB (M) 2*2048kB (M) 10*4096kB (UM) = 53120kB [ 1494.614127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1494.640929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1494.664732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1494.691573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1494.715512] 6946 total pagecache pages [ 1494.725658] 0 pages in swap cache [ 1494.744290] Swap cache stats: add 0, delete 0, find 0/0 [ 1494.774494] Free swap = 0kB [ 1494.786479] Total swap = 0kB [ 1494.813318] 2097051 pages RAM [ 1494.816450] 0 pages HighMem/MovableOnly [ 1494.831522] 363840 pages reserved [ 1494.835543] 0 pages cma reserved [ 1494.843146] Out of memory (oom_kill_allocating_task): Kill process 13028 (rs:main Q:Reg) score 0 or sacrifice child [ 1494.864899] Killed process 13023 (rsyslogd) total-vm:254332kB, anon-rss:1016kB, file-rss:0kB, shmem-rss:0kB [ 1494.877822] oom_reaper: reaped process 13023 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1494.920577] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1494.959091] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1494.971857] CPU: 1 PID: 7981 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 1494.979680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.989040] Call Trace: [ 1494.991636] dump_stack+0x1b2/0x281 [ 1494.995291] dump_header+0x178/0x82f [ 1494.999016] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1495.004115] ? ___ratelimit+0x2cd/0x530 [ 1495.008091] oom_kill_process.cold+0x10/0xb18 [ 1495.012607] out_of_memory+0xe3e/0x1190 [ 1495.016579] ? oom_killer_disable+0x1c0/0x1c0 [ 1495.021160] ? mutex_trylock+0x152/0x1a0 [ 1495.025251] __alloc_pages_nodemask+0x23e1/0x2720 [ 1495.030112] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1495.035003] alloc_pages_current+0x155/0x260 [ 1495.039678] filemap_fault+0xea3/0x1980 [ 1495.043666] ext4_filemap_fault+0x84/0xb0 [ 1495.047816] __do_fault+0xfa/0x380 [ 1495.051350] __handle_mm_fault+0x2497/0x4620 [ 1495.055758] ? vm_insert_page+0x7c0/0x7c0 [ 1495.059903] ? lock_downgrade+0x740/0x740 [ 1495.064061] handle_mm_fault+0x391/0x860 [ 1495.068134] __do_page_fault+0x549/0xad0 [ 1495.072194] ? spurious_fault+0x640/0x640 [ 1495.076336] ? do_page_fault+0x60/0x500 [ 1495.080305] ? page_fault+0x2f/0x50 [ 1495.083922] page_fault+0x45/0x50 [ 1495.087365] RIP: 16bb64:0x2 [ 1495.090283] RSP: 473a:00007ffd4863becc EFLAGS: 00000032 [ 1495.099432] Mem-Info: [ 1495.108731] active_anon:14155 inactive_anon:6737 isolated_anon:0 [ 1495.108731] active_file:41 inactive_file:30 isolated_file:0 [ 1495.108731] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1495.108731] slab_reclaimable:21215 slab_unreclaimable:103916 [ 1495.108731] mapped:54832 shmem:6924 pagetables:781 bounce:0 [ 1495.108731] free:25036 free_pcp:167 free_cma:0 [ 1495.166622] Node 0 active_anon:56412kB inactive_anon:26948kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219328kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1495.225800] Node 1 active_anon:208kB inactive_anon:0kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1495.254745] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1495.283798] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1495.288975] Node 0 DMA32 free:36132kB min:36200kB low:45248kB high:54296kB active_anon:56452kB inactive_anon:26948kB active_file:72kB inactive_file:212kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:3008kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 1495.612056] lowmem_reserve[]: 0 0 0 0 0 [ 1495.616097] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1495.965129] lowmem_reserve[]: 0 0 0 0 0 [ 1496.025259] Node 1 Normal free:53244kB min:53696kB low:67120kB high:80544kB active_anon:208kB inactive_anon:0kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1496.345366] lowmem_reserve[]: 0 0 0 0 0 [ 1496.384511] Node 0 DMA: 2*4kB (UE) 7*8kB (UE) 7*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11056kB [ 1496.522232] Node 0 DMA32: 3513*4kB (UME) 1255*8kB (UME) 245*16kB (ME) 251*32kB (UME) 5*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36492kB [ 1496.668780] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1496.764545] Node 1 Normal: 11*4kB (M) 14*8kB (UM) 8*16kB (M) 11*32kB (UM) 14*64kB (UM) 10*128kB (UM) 5*256kB (M) 4*512kB (M) 2*1024kB (M) 2*2048kB (M) 10*4096kB (UM) = 53244kB [ 1496.914546] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1496.979565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1497.070070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1497.112463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1497.123865] 6971 total pagecache pages [ 1497.145919] 0 pages in swap cache [ 1497.175623] Swap cache stats: add 0, delete 0, find 0/0 [ 1497.204782] Free swap = 0kB [ 1497.236150] Total swap = 0kB [ 1497.265717] 2097051 pages RAM [ 1497.335392] 0 pages HighMem/MovableOnly [ 1497.395497] 363840 pages reserved [ 1497.435079] 0 pages cma reserved [ 1497.464346] Out of memory (oom_kill_allocating_task): Kill process 7981 (syz-executor.4) score 0 or sacrifice child [ 1497.520030] Killed process 13035 (syz-executor.4) total-vm:93252kB, anon-rss:2192kB, file-rss:34820kB, shmem-rss:0kB [ 1497.645255] oom_reaper: reaped process 13035 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1497.735696] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1497.796166] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1497.835877] CPU: 1 PID: 7969 Comm: syz-fuzzer Not tainted 4.14.226-syzkaller #0 [ 1497.843347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1497.852693] Call Trace: [ 1497.855283] dump_stack+0x1b2/0x281 [ 1497.858906] dump_header+0x178/0x82f [ 1497.862630] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1497.867736] ? ___ratelimit+0x2cd/0x530 [ 1497.871738] oom_kill_process.cold+0x10/0xb18 [ 1497.876230] out_of_memory+0xe3e/0x1190 [ 1497.880208] ? oom_killer_disable+0x1c0/0x1c0 [ 1497.884699] ? mutex_trylock+0x152/0x1a0 [ 1497.888746] __alloc_pages_nodemask+0x23e1/0x2720 [ 1497.893596] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1497.898441] alloc_pages_current+0x155/0x260 [ 1497.902829] filemap_fault+0xea3/0x1980 [ 1497.906807] ext4_filemap_fault+0x84/0xb0 [ 1497.910937] __do_fault+0xfa/0x380 [ 1497.914467] __handle_mm_fault+0x2497/0x4620 [ 1497.918869] ? vm_insert_page+0x7c0/0x7c0 [ 1497.923007] handle_mm_fault+0x391/0x860 [ 1497.927051] __do_page_fault+0x549/0xad0 [ 1497.931101] ? spurious_fault+0x640/0x640 [ 1497.935228] ? do_page_fault+0x60/0x500 [ 1497.939198] ? page_fault+0x2f/0x50 [ 1497.942808] page_fault+0x45/0x50 [ 1497.946246] RIP: 0006:0x166525d7722 [ 1497.949863] RSP: 80198:000000c0002a3db8 EFLAGS: 166525d7722 [ 1497.959683] Mem-Info: [ 1497.965481] syz-executor.4: [ 1497.972046] active_anon:13633 inactive_anon:6737 isolated_anon:0 [ 1497.972046] active_file:35 inactive_file:13 isolated_file:0 [ 1497.972046] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1497.972046] slab_reclaimable:21221 slab_unreclaimable:103653 [ 1497.972046] mapped:54813 shmem:6924 pagetables:785 bounce:0 [ 1497.972046] free:13955 free_pcp:81 free_cma:0 [ 1497.985560] page allocation failure: order:0 [ 1498.016749] Node 0 active_anon:54392kB inactive_anon:26948kB active_file:112kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219252kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1498.036602] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1498.063231] Node 1 active_anon:136kB inactive_anon:0kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1498.073771] (null) [ 1498.107982] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1498.113135] CPU: 0 PID: 13035 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 1498.121046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1498.130408] Call Trace: [ 1498.133012] dump_stack+0x1b2/0x281 [ 1498.136645] warn_alloc.cold+0x96/0x1cc [ 1498.140622] ? zone_watermark_ok_safe+0x220/0x220 [ 1498.145490] ? usleep_range+0x130/0x130 [ 1498.149467] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1498.154749] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1498.159770] ? run_timer_softirq+0x5a0/0x5a0 [ 1498.164475] __alloc_pages_nodemask+0x2127/0x2720 [ 1498.169332] ? lock_acquire+0x170/0x3f0 [ 1498.173315] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1498.178165] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1498.182699] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1498.188190] alloc_pages_current+0x155/0x260 [ 1498.192607] ion_page_pool_alloc+0x118/0x1b0 [ 1498.197022] ion_system_heap_allocate+0x133/0x8c0 [ 1498.201913] ? ion_alloc+0x187/0x810 [ 1498.205627] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1498.211084] ? ion_system_contig_heap_create+0x130/0x130 [ 1498.216535] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1498.221549] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1498.226394] ion_alloc+0x204/0x810 [ 1498.229942] ? ion_dma_buf_release+0x40/0x40 [ 1498.234358] ? __might_fault+0x177/0x1b0 [ 1498.238421] ion_ioctl+0xea/0x1f0 [ 1498.241878] ? ion_query_heaps+0x360/0x360 [ 1498.246116] ? ion_query_heaps+0x360/0x360 [ 1498.250369] do_vfs_ioctl+0x75a/0xff0 [ 1498.254175] ? ioctl_preallocate+0x1a0/0x1a0 [ 1498.258580] ? lock_downgrade+0x740/0x740 [ 1498.262729] ? __fget+0x225/0x360 [ 1498.266354] ? do_vfs_ioctl+0xff0/0xff0 [ 1498.270337] ? security_file_ioctl+0x83/0xb0 [ 1498.274746] SyS_ioctl+0x7f/0xb0 [ 1498.278110] ? do_vfs_ioctl+0xff0/0xff0 [ 1498.282084] do_syscall_64+0x1d5/0x640 [ 1498.285980] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1498.291168] RIP: 0033:0x465f69 [ 1498.294353] RSP: 002b:00007f9a160a9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1498.302058] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1498.309325] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1498.316590] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1498.323856] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1498.331123] R13: 00007ffd4863bc0f R14: 00007f9a160a9300 R15: 0000000000022000 [ 1498.344213] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1498.352696] warn_alloc_show_mem: 3 callbacks suppressed [ 1498.352699] Mem-Info: [ 1498.393353] active_anon:13633 inactive_anon:6737 isolated_anon:0 [ 1498.393353] active_file:17 inactive_file:17 isolated_file:0 [ 1498.393353] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1498.393353] slab_reclaimable:21171 slab_unreclaimable:103628 [ 1498.393353] mapped:54814 shmem:6924 pagetables:785 bounce:0 [ 1498.393353] free:14043 free_pcp:145 free_cma:0 [ 1498.396390] lowmem_reserve[]: [ 1498.431260] Node 0 active_anon:54396kB inactive_anon:26948kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219256kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1498.466558] Node 1 active_anon:136kB inactive_anon:0kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1498.497348] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1498.527820] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1498.532997] Node 0 DMA32 free:18360kB min:36200kB low:45248kB high:54296kB active_anon:54396kB inactive_anon:26948kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:3008kB bounce:0kB free_pcp:392kB local_pcp:136kB free_cma:0kB [ 1498.544459] 0 [ 1498.566366] lowmem_reserve[]: 0 0 0 0 0 [ 1498.572308] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1498.603212] lowmem_reserve[]: 0 0 0 0 0 [ 1498.607263] Node 1 Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:136kB inactive_anon:0kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:132kB bounce:0kB free_pcp:188kB local_pcp:188kB free_cma:0kB [ 1498.640764] lowmem_reserve[]: 0 0 0 0 0 [ 1498.644776] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 5*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 1498.664381] Node 0 DMA32: 2552*4kB (UME) 800*8kB (UME) 104*16kB (UME) 4*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18400kB [ 1498.682402] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1498.693438] Node 1 Normal: 13*4kB (UM) 14*8kB (UM) 9*16kB (UM) 11*32kB (UM) 13*64kB (M) 10*128kB (UM) 6*256kB (UM) 4*512kB (M) 2*1024kB (M) 3*2048kB (UM) 3*4096kB (UM) = 26836kB [ 1498.714505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1498.723411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1498.736371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1498.745402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1498.759362] 6958 total pagecache pages [ 1498.763370] 0 pages in swap cache [ 1498.766857] Swap cache stats: add 0, delete 0, find 0/0 [ 1498.772591] Free swap = 0kB [ 1498.775601] Total swap = 0kB [ 1498.782961] 2097051 pages RAM [ 1498.786086] 0 pages HighMem/MovableOnly [ 1498.790151] 363840 pages reserved [ 1498.793599] 0 pages cma reserved [ 1498.810055] 2717 2718 2718 2718 [ 1498.813470] Node 0 DMA32 free:18360kB min:36200kB low:45248kB high:54296kB active_anon:54396kB inactive_anon:26948kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:3008kB bounce:0kB free_pcp:392kB local_pcp:256kB free_cma:0kB [ 1498.855028] lowmem_reserve[]: 0 0 0 0 0 [ 1498.873655] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1498.900511] lowmem_reserve[]: 0 0 0 0 0 [ 1498.905018] Node 1 Normal free:36336kB min:53696kB low:67120kB high:80544kB active_anon:136kB inactive_anon:0kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1498.938211] lowmem_reserve[]: 0 0 0 0 0 [ 1498.942686] Node 0 DMA: 2*4kB (UE) 7*8kB (UE) 7*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11056kB [ 1498.958367] Node 0 DMA32: 3167*4kB (ME) 1235*8kB (UME) 254*16kB (UME) 248*32kB (UME) 5*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 1*2048kB (U) 0*4096kB = 37044kB [ 1498.978199] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1498.992640] Node 1 Normal: 1188*4kB (UM) 17*8kB (UM) 12*16kB (UM) 17*32kB (UM) 12*64kB (M) 8*128kB (M) 4*256kB (M) 4*512kB (UM) 4*1024kB (UM) 2*2048kB (M) 2*4096kB (M) = 26872kB [ 1499.016592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1499.026315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1499.037885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1499.048288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1499.057688] 6977 total pagecache pages [ 1499.061582] 0 pages in swap cache [ 1499.065028] Swap cache stats: add 0, delete 0, find 0/0 [ 1499.070498] Free swap = 0kB [ 1499.073510] Total swap = 0kB [ 1499.076518] 2097051 pages RAM [ 1499.079659] 0 pages HighMem/MovableOnly [ 1499.083644] 363840 pages reserved [ 1499.087162] 0 pages cma reserved [ 1499.090525] Out of memory (oom_kill_allocating_task): Kill process 7969 (syz-fuzzer) score 0 or sacrifice child [ 1499.101026] Killed process 13046 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1499.117010] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1499.132095] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1499.136969] CPU: 1 PID: 7969 Comm: syz-fuzzer Not tainted 4.14.226-syzkaller #0 [ 1499.140273] syz-executor.4: [ 1499.145541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1499.145553] page allocation failure: order:4 [ 1499.148563] Call Trace: [ 1499.148585] dump_stack+0x1b2/0x281 [ 1499.148596] dump_header+0x178/0x82f [ 1499.148606] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1499.148615] ? ___ratelimit+0x2cd/0x530 [ 1499.148623] oom_kill_process.cold+0x10/0xb18 [ 1499.148639] out_of_memory+0xe3e/0x1190 [ 1499.148652] ? oom_killer_disable+0x1c0/0x1c0 [ 1499.148659] ? mutex_trylock+0x152/0x1a0 [ 1499.148669] __alloc_pages_nodemask+0x23e1/0x2720 [ 1499.148690] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1499.148716] alloc_pages_current+0x155/0x260 [ 1499.148726] filemap_fault+0xea3/0x1980 [ 1499.148745] ext4_filemap_fault+0x84/0xb0 [ 1499.197893] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1499.198398] __do_fault+0xfa/0x380 [ 1499.203216] (null) [ 1499.208048] __handle_mm_fault+0x2497/0x4620 [ 1499.208058] ? vm_insert_page+0x7c0/0x7c0 [ 1499.208078] handle_mm_fault+0x391/0x860 [ 1499.208091] __do_page_fault+0x549/0xad0 [ 1499.212478] syz-executor.4 cpuset= [ 1499.216444] ? spurious_fault+0x640/0x640 [ 1499.220605] / [ 1499.227655] ? do_page_fault+0x60/0x500 [ 1499.231208] mems_allowed=0-1 [ 1499.233330] ? page_fault+0x2f/0x50 [ 1499.272696] page_fault+0x45/0x50 [ 1499.276138] RIP: 0006:0x166525d7722 [ 1499.279745] RSP: 80198:000000c0002a3db8 EFLAGS: 166525d7722 [ 1499.279769] CPU: 0 PID: 13035 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 1499.284832] Mem-Info: [ 1499.285480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1499.294429] active_anon:13638 inactive_anon:6737 isolated_anon:0 [ 1499.294429] active_file:33 inactive_file:6 isolated_file:0 [ 1499.294429] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1499.294429] slab_reclaimable:21178 slab_unreclaimable:103657 [ 1499.294429] mapped:54829 shmem:6924 pagetables:785 bounce:0 [ 1499.294429] free:18145 free_pcp:1 free_cma:0 [ 1499.296719] Call Trace: [ 1499.296742] dump_stack+0x1b2/0x281 [ 1499.296756] warn_alloc.cold+0x96/0x1cc [ 1499.296768] ? zone_watermark_ok_safe+0x220/0x220 [ 1499.296794] __alloc_pages_nodemask+0x2127/0x2720 [ 1499.308834] Node 0 active_anon:54420kB inactive_anon:26948kB active_file:116kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219316kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1499.338976] ? lock_acquire+0x170/0x3f0 [ 1499.338989] ? lock_acquire+0x170/0x3f0 [ 1499.339004] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1499.339021] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1499.339032] ? __mutex_unlock_slowpath+0x75/0x770 [ 1499.339046] alloc_pages_current+0x155/0x260 [ 1499.339059] ion_page_pool_alloc+0x118/0x1b0 [ 1499.339070] ion_system_heap_allocate+0x133/0x8c0 [ 1499.339083] ? _raw_spin_unlock+0x29/0x40 [ 1499.345917] Node 1 active_anon:132kB inactive_anon:0kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1499.349345] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1499.349356] ? ion_system_contig_heap_create+0x130/0x130 [ 1499.349367] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1499.349378] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1499.349390] ion_alloc+0x27a/0x810 [ 1499.349405] ? ion_dma_buf_release+0x40/0x40 [ 1499.354242] Node 0 [ 1499.359087] ? __might_fault+0x177/0x1b0 [ 1499.359102] ion_ioctl+0xea/0x1f0 [ 1499.359113] ? ion_query_heaps+0x360/0x360 [ 1499.359125] ? ion_query_heaps+0x360/0x360 [ 1499.359134] do_vfs_ioctl+0x75a/0xff0 [ 1499.359145] ? ioctl_preallocate+0x1a0/0x1a0 [ 1499.359155] ? lock_downgrade+0x740/0x740 [ 1499.359167] ? __fget+0x225/0x360 [ 1499.359175] ? do_vfs_ioctl+0xff0/0xff0 [ 1499.359186] ? security_file_ioctl+0x83/0xb0 [ 1499.359195] SyS_ioctl+0x7f/0xb0 [ 1499.359202] ? do_vfs_ioctl+0xff0/0xff0 [ 1499.359213] do_syscall_64+0x1d5/0x640 [ 1499.359230] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1499.359241] RIP: 0033:0x465f69 [ 1499.391323] DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.394875] RSP: 002b:00007f9a160a9188 EFLAGS: 00000246 [ 1499.399848] lowmem_reserve[]: [ 1499.405279] ORIG_RAX: 0000000000000010 [ 1499.405289] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1499.415181] 0 [ 1499.418935] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1499.418941] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1499.418945] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1499.418950] R13: 00007ffd4863bc0f R14: 00007f9a160a9300 R15: 0000000000022000 [ 1499.557663] Mem-Info: [ 1499.575223] 2717 [ 1499.615301] active_anon:13638 inactive_anon:6737 isolated_anon:0 [ 1499.615301] active_file:33 inactive_file:6 isolated_file:0 [ 1499.615301] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1499.615301] slab_reclaimable:21178 slab_unreclaimable:103657 [ 1499.615301] mapped:54829 shmem:6924 pagetables:785 bounce:0 [ 1499.615301] free:18145 free_pcp:0 free_cma:0 [ 1499.626952] 2718 [ 1499.650766] Node 0 active_anon:54420kB inactive_anon:26948kB active_file:116kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219316kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1499.671037] 2718 [ 1499.700472] Node 1 active_anon:132kB inactive_anon:0kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1499.741082] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.770773] 2718 [ 1499.772860] Node 0 DMA32 free:34716kB min:36200kB low:45248kB high:54296kB active_anon:54420kB inactive_anon:26948kB active_file:16kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:3008kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.776252] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1499.813120] lowmem_reserve[]: 0 0 0 0 0 [ 1499.834159] Node 0 DMA32 free:34716kB min:36200kB low:45248kB high:54296kB active_anon:54420kB inactive_anon:26948kB active_file:116kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:3008kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.834388] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.889546] lowmem_reserve[]: [ 1499.918678] lowmem_reserve[]: 0 0 0 0 0 [ 1499.925825] Node 1 Normal free:26872kB min:53696kB low:67120kB high:80544kB active_anon:132kB inactive_anon:0kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.927023] 0 [ 1499.969604] lowmem_reserve[]: 0 0 0 0 0 [ 1499.975447] Node 0 DMA: 2*4kB (UE) 7*8kB (UE) 7*16kB (U) 4*32kB (UE) 5*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10992kB [ 1499.978053] 0 [ 1500.003828] Node 0 DMA32: 3468*4kB (UME) 1204*8kB (UME) 239*16kB (UME) 237*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34912kB [ 1500.012570] 0 0 0 [ 1500.035073] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1500.065549] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1500.073490] lowmem_reserve[]: 0 0 0 0 0 [ 1500.093440] Node 1 Normal free:26872kB min:53696kB low:67120kB high:80544kB active_anon:132kB inactive_anon:0kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1500.116466] Node 1 [ 1500.134862] lowmem_reserve[]: 0 0 0 0 0 [ 1500.145561] Node 0 DMA: 2*4kB (UE) 7*8kB (UE) 7*16kB (U) 4*32kB (UE) 5*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10992kB [ 1500.166399] Normal: 1188*4kB (UM) 17*8kB (UM) 12*16kB (UM) 17*32kB (UM) 12*64kB (M) 8*128kB (M) 4*256kB (M) 4*512kB (UM) 4*1024kB (UM) 2*2048kB (M) 2*4096kB (M) = 26872kB [ 1500.174184] Node 0 DMA32: 3468*4kB (UME) 1205*8kB (UME) 239*16kB (UME) 237*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34920kB [ 1500.206027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1500.221468] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1500.245312] Node 1 Normal: 1188*4kB (UM) 17*8kB (UM) 12*16kB (UM) 17*32kB (UM) 12*64kB (M) 8*128kB (M) 4*256kB (M) 4*512kB (UM) 4*1024kB (UM) 2*2048kB (M) 2*4096kB (M) = 26872kB [ 1500.266516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1500.276456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1500.295540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1500.300331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1500.324937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1500.328443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1500.353718] 6957 total pagecache pages [ 1500.359415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1500.375886] 0 pages in swap cache [ 1500.380892] 6957 total pagecache pages [ 1500.384813] 0 pages in swap cache [ 1500.403740] Swap cache stats: add 0, delete 0, find 0/0 [ 1500.406339] Swap cache stats: add 0, delete 0, find 0/0 [ 1500.430752] Free swap = 0kB [ 1500.433824] Total swap = 0kB [ 1500.434687] Free swap = 0kB [ 1500.451700] 2097051 pages RAM [ 1500.454831] 0 pages HighMem/MovableOnly [ 1500.459402] Total swap = 0kB [ 1500.463999] 2097051 pages RAM [ 1500.474634] 363840 pages reserved [ 1500.484381] 0 pages HighMem/MovableOnly [ 1500.484861] 0 pages cma reserved [ 1500.511340] Out of memory (oom_kill_allocating_task): Kill process 7969 (syz-fuzzer) score 0 or sacrifice child [ 1500.514522] 363840 pages reserved [ 1500.542067] Killed process 7976 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1500.553594] 0 pages cma reserved [ 1500.575654] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1500.604542] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1500.615781] CPU: 1 PID: 7969 Comm: syz-fuzzer Not tainted 4.14.226-syzkaller #0 [ 1500.623255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1500.632635] Call Trace: [ 1500.635237] dump_stack+0x1b2/0x281 [ 1500.638869] dump_header+0x178/0x82f [ 1500.642588] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1500.647687] ? ___ratelimit+0x2cd/0x530 [ 1500.651663] oom_kill_process.cold+0x10/0xb18 [ 1500.656167] out_of_memory+0xe3e/0x1190 [ 1500.660150] ? oom_killer_disable+0x1c0/0x1c0 [ 1500.664666] ? mutex_trylock+0x152/0x1a0 [ 1500.668734] __alloc_pages_nodemask+0x23e1/0x2720 [ 1500.673690] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1500.678531] alloc_pages_current+0x155/0x260 [ 1500.682938] filemap_fault+0xea3/0x1980 [ 1500.686909] ext4_filemap_fault+0x84/0xb0 [ 1500.691043] __do_fault+0xfa/0x380 [ 1500.694562] __handle_mm_fault+0x2497/0x4620 [ 1500.699006] ? vm_insert_page+0x7c0/0x7c0 [ 1500.703257] handle_mm_fault+0x391/0x860 [ 1500.707338] __do_page_fault+0x549/0xad0 [ 1500.711413] ? spurious_fault+0x640/0x640 [ 1500.715564] ? do_page_fault+0x60/0x500 [ 1500.719539] ? page_fault+0x2f/0x50 [ 1500.723165] page_fault+0x45/0x50 [ 1500.726617] RIP: 0006:0x166525d7722 [ 1500.730326] RSP: 80198:000000c0002a3db8 EFLAGS: 166525d7722 [ 1500.738456] Mem-Info: [ 1500.747725] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1500.751619] active_anon:13638 inactive_anon:6737 isolated_anon:0 [ 1500.751619] active_file:5 inactive_file:28 isolated_file:0 [ 1500.751619] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1500.751619] slab_reclaimable:21178 slab_unreclaimable:103657 [ 1500.751619] mapped:54814 shmem:6924 pagetables:785 bounce:0 [ 1500.751619] free:13942 free_pcp:61 free_cma:0 [ 1500.786247] syz-executor.4 cpuset= [ 1500.803346] Node 0 active_anon:54420kB inactive_anon:26948kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219256kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1500.821943] / [ 1500.842952] Node 1 active_anon:132kB inactive_anon:0kB active_file:0kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1500.861668] mems_allowed=0-1 [ 1500.892833] CPU: 0 PID: 13035 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 1500.894421] Node 0 [ 1500.900741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1500.900746] Call Trace: [ 1500.900769] dump_stack+0x1b2/0x281 [ 1500.900788] warn_alloc.cold+0x96/0x1cc [ 1500.900800] ? zone_watermark_ok_safe+0x220/0x220 [ 1500.900810] ? usleep_range+0x130/0x130 [ 1500.900818] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1500.900831] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1500.900840] ? run_timer_softirq+0x5a0/0x5a0 [ 1500.900856] __alloc_pages_nodemask+0x2127/0x2720 [ 1500.900871] ? lock_acquire+0x170/0x3f0 [ 1500.922328] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1500.922603] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1500.936323] lowmem_reserve[]: [ 1500.936472] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1500.962959] 0 [ 1500.980142] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1500.980162] alloc_pages_current+0x155/0x260 [ 1500.980178] ion_page_pool_alloc+0x118/0x1b0 [ 1500.980188] ion_system_heap_allocate+0x133/0x8c0 [ 1500.980199] ? _raw_spin_unlock+0x29/0x40 [ 1500.980208] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1500.980219] ? ion_system_contig_heap_create+0x130/0x130 [ 1500.980231] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1500.980240] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1500.980251] ion_alloc+0x27a/0x810 [ 1500.980265] ? ion_dma_buf_release+0x40/0x40 [ 1500.980277] ? __might_fault+0x177/0x1b0 [ 1500.980289] ion_ioctl+0xea/0x1f0 [ 1500.980299] ? ion_query_heaps+0x360/0x360 [ 1500.980312] ? ion_query_heaps+0x360/0x360 [ 1500.980322] do_vfs_ioctl+0x75a/0xff0 [ 1500.980333] ? ioctl_preallocate+0x1a0/0x1a0 [ 1500.980342] ? lock_downgrade+0x740/0x740 [ 1500.980355] ? __fget+0x225/0x360 [ 1500.980366] ? do_vfs_ioctl+0xff0/0xff0 [ 1501.001695] 2717 [ 1501.004426] ? security_file_ioctl+0x83/0xb0 [ 1501.025997] 2718 [ 1501.028163] SyS_ioctl+0x7f/0xb0 [ 1501.028173] ? do_vfs_ioctl+0xff0/0xff0 [ 1501.028184] do_syscall_64+0x1d5/0x640 [ 1501.028201] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1501.028210] RIP: 0033:0x465f69 [ 1501.028214] RSP: 002b:00007f9a160a9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1501.033581] 2718 [ 1501.038408] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1501.038414] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1501.038418] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1501.038423] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1501.038428] R13: 00007ffd4863bc0f R14: 00007f9a160a9300 R15: 0000000000022000 [ 1501.038680] Bluetooth: hci1 command 0x0409 tx timeout [ 1501.054971] 2718 [ 1501.072496] Bluetooth: hci0 command 0x0409 tx timeout [ 1501.109659] Mem-Info: [ 1501.126375] Node 0 [ 1501.146881] active_anon:13638 inactive_anon:6737 isolated_anon:0 [ 1501.146881] active_file:16 inactive_file:17 isolated_file:0 [ 1501.146881] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1501.146881] slab_reclaimable:21177 slab_unreclaimable:103655 [ 1501.146881] mapped:54814 shmem:6924 pagetables:785 bounce:0 [ 1501.146881] free:13944 free_pcp:65 free_cma:0 [ 1501.172002] DMA32 free:18056kB min:36200kB low:45248kB high:54296kB active_anon:54420kB inactive_anon:26948kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:3008kB bounce:0kB free_pcp:140kB local_pcp:4kB free_cma:0kB [ 1501.192355] Node 0 active_anon:54420kB inactive_anon:26948kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219256kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1501.224806] lowmem_reserve[]: [ 1501.256392] Node 1 active_anon:132kB inactive_anon:0kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1501.282912] 0 [ 1501.313250] Node 0 [ 1501.314985] 0 [ 1501.315106] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1501.325368] 0 [ 1501.355767] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1501.362672] Node 0 DMA32 free:18056kB min:36200kB low:45248kB high:54296kB active_anon:54420kB inactive_anon:26948kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:3008kB bounce:0kB free_pcp:140kB local_pcp:136kB free_cma:0kB [ 1501.386201] 0 [ 1501.402621] lowmem_reserve[]: 0 0 0 0 0 [ 1501.412900] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1501.445637] 0 [ 1501.449360] lowmem_reserve[]: 0 0 0 0 0 [ 1501.453365] Node 1 Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:132kB inactive_anon:0kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:132kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1501.470287] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1501.502046] lowmem_reserve[]: [ 1501.532535] lowmem_reserve[]: [ 1501.533447] 0 [ 1501.535684] 0 [ 1501.545242] 0 [ 1501.554184] 0 0 0 0 [ 1501.562560] 0 0 0 [ 1501.564726] Node 0 DMA: 1*4kB (E) 5*8kB (UE) 7*16kB (U) 4*32kB (UE) 5*64kB (UE) 7*128kB (UE) 5*256kB [ 1501.564794] Node 1 Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:132kB inactive_anon:0kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:132kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1501.591181] (UE) [ 1501.620768] lowmem_reserve[]: 0 0 0 0 0 [ 1501.626293] 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10972kB [ 1501.636388] Node 0 DMA: 1*4kB (E) 5*8kB (UE) 7*16kB (U) 4*32kB (UE) 5*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10972kB [ 1501.666765] Node 0 DMA32: 2592*4kB (ME) 751*8kB (UME) 100*16kB (UME) 3*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18072kB [ 1501.689945] Node 0 DMA32: 2592*4kB (ME) 751*8kB (UME) 100*16kB (UME) 3*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18072kB [ 1501.718757] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1501.728674] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1501.743333] Node 1 Normal: 1157*4kB (UM) 17*8kB (UM) 12*16kB (UM) 17*32kB (UM) 12*64kB (M) 8*128kB (M) 4*256kB (M) 4*512kB (UM) 4*1024kB (UM) 2*2048kB (M) 2*4096kB (M) = 26748kB [ 1501.761020] Node 1 Normal: 1157*4kB (UM) 17*8kB (UM) 12*16kB (UM) 17*32kB (UM) 12*64kB (M) 8*128kB (M) 4*256kB (M) 4*512kB (UM) 4*1024kB (UM) 2*2048kB (M) 2*4096kB (M) = 26748kB [ 1501.772585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1501.804747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1501.805299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1501.831811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1501.841301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1501.856424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1501.864610] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1501.884101] 6957 total pagecache pages [ 1501.893220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1501.903441] 0 pages in swap cache [ 1501.914696] 6957 total pagecache pages [ 1501.915010] Swap cache stats: add 0, delete 0, find 0/0 [ 1501.939587] Free swap = 0kB [ 1501.942635] Total swap = 0kB [ 1501.944625] 0 pages in swap cache [ 1501.945644] 2097051 pages RAM [ 1501.966251] 0 pages HighMem/MovableOnly [ 1501.970814] Swap cache stats: add 0, delete 0, find 0/0 [ 1501.972572] 363840 pages reserved [ 1501.976195] Free swap = 0kB [ 1501.993535] 0 pages cma reserved [ 1502.000116] Total swap = 0kB [ 1502.003155] 2097051 pages RAM [ 1502.006251] 0 pages HighMem/MovableOnly [ 1502.015137] Out of memory (oom_kill_allocating_task): Kill process 7969 (syz-fuzzer) score 0 or sacrifice child [ 1502.023283] 363840 pages reserved [ 1502.045345] Killed process 7974 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1502.055699] 0 pages cma reserved [ 1502.113562] oom_reaper: reaped process 13046 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1502.138411] IPVS: ftp: loaded support on port[0] = 21 [ 1502.204399] oom_reaper: reaped process 7974 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 03:04:56 executing program 4 (fault-call:3 fault-nth:0): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:56 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x92080, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:04:56 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername(r0, &(0x7f0000000280)=@isdn, &(0x7f0000000300)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4002090) [ 1502.891842] chnl_net:caif_netlink_parms(): no params data found [ 1503.076643] Bluetooth: hci1 command 0x041b tx timeout [ 1503.156772] Bluetooth: hci0 command 0x041b tx timeout [ 1503.349787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.380128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.404570] device bridge_slave_0 entered promiscuous mode [ 1503.428229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.440484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.467580] device bridge_slave_1 entered promiscuous mode [ 1503.554626] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1503.794730] syz-executor.0 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 1503.851197] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1503.878730] CPU: 1 PID: 13047 Comm: syz-executor.0 Not tainted 4.14.226-syzkaller #0 [ 1503.886643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1503.896102] Call Trace: [ 1503.898695] dump_stack+0x1b2/0x281 [ 1503.902344] dump_header+0x178/0x82f [ 1503.906258] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1503.911360] ? ___ratelimit+0x2cd/0x530 [ 1503.915418] oom_kill_process.cold+0x10/0xb18 [ 1503.919919] out_of_memory+0xe3e/0x1190 [ 1503.923894] ? oom_killer_disable+0x1c0/0x1c0 [ 1503.928398] ? mutex_trylock+0x152/0x1a0 [ 1503.932462] __alloc_pages_nodemask+0x23e1/0x2720 [ 1503.937320] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1503.942259] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1503.946678] ? netlink_rcv_skb+0x125/0x390 [ 1503.950941] ? mark_held_locks+0xa6/0xf0 [ 1503.955183] ? cache_grow_begin+0x41/0x630 [ 1503.959423] cache_grow_begin+0x91/0x630 [ 1503.963486] ? cache_grow_begin+0x91/0x630 [ 1503.967727] fallback_alloc+0x207/0x2c0 [ 1503.971729] kmem_cache_alloc_node_trace+0xed/0x400 [ 1503.976778] __kmalloc_node_track_caller+0x38/0x70 [ 1503.981729] __alloc_skb+0x96/0x510 [ 1503.985374] rtmsg_ifinfo_build_skb+0x65/0x130 [ 1503.989983] rtnetlink_event+0xee/0x1a0 [ 1503.993974] notifier_call_chain+0x108/0x1a0 [ 1503.998400] __netdev_upper_dev_link+0x28d/0x350 [ 1504.003248] ? default_device_exit+0x250/0x250 [ 1504.007835] ? __netdev_adjacent_dev_insert+0x6b1/0x940 [ 1504.013191] ? lockdep_rtnl_is_held+0x16/0x20 [ 1504.017684] ? netdev_is_rx_handler_busy+0x67/0xc0 [ 1504.022715] bond_enslave+0x28ae/0x4cc0 [ 1504.026699] ? bond_update_slave_arr+0x6a0/0x6a0 [ 1504.031451] ? __lock_acquire+0x5fc/0x3f20 [ 1504.035831] ? vring_map_one_sg+0x12e/0x370 [ 1504.040154] ? bond_update_slave_arr+0x6a0/0x6a0 [ 1504.044900] do_set_master+0x19e/0x200 [ 1504.048782] do_setlink+0x8b8/0x2bf0 [ 1504.052491] ? rtnl_fdb_add+0x770/0x770 [ 1504.056522] ? virtscsi_add_cmd+0x4dc/0x750 [ 1504.060932] ? virtscsi_target_alloc+0x1b0/0x1b0 [ 1504.065685] ? virtscsi_kick_cmd+0xb3/0x100 [ 1504.070001] ? __lock_acquire+0x5fc/0x3f20 [ 1504.074306] ? vp_notify+0x56/0x80 [ 1504.077842] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1504.082852] ? virtqueue_notify+0x6f/0xf0 [ 1504.087017] ? virtscsi_kick_cmd+0x73/0x100 [ 1504.091333] ? validate_nla+0x192/0x5e0 [ 1504.095294] ? nla_parse+0x157/0x1f0 [ 1504.098994] ? validate_linkmsg+0x3a1/0x460 [ 1504.103302] rtnl_newlink+0x1267/0x1830 [ 1504.107275] ? __lock_acquire+0x5fc/0x3f20 [ 1504.111501] ? trace_hardirqs_on+0x10/0x10 [ 1504.115724] ? rtnl_dellink+0x6a0/0x6a0 [ 1504.119686] ? trace_hardirqs_on+0x10/0x10 [ 1504.123911] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1504.129789] ? trace_hardirqs_on_caller+0x4c0/0x580 [ 1504.134794] ? deref_stack_reg+0x124/0x1a0 [ 1504.139019] ? __lock_acquire+0x5fc/0x3f20 [ 1504.143267] ? lock_acquire+0x170/0x3f0 [ 1504.147244] ? lock_downgrade+0x740/0x740 [ 1504.151376] ? rtnl_dellink+0x6a0/0x6a0 [ 1504.155339] rtnetlink_rcv_msg+0x3be/0xb10 [ 1504.159564] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1504.164047] ? __netlink_lookup+0x345/0x5d0 [ 1504.168361] netlink_rcv_skb+0x125/0x390 [ 1504.172410] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1504.176895] ? netlink_ack+0x9a0/0x9a0 [ 1504.180773] netlink_unicast+0x437/0x610 [ 1504.184825] ? netlink_sendskb+0xd0/0xd0 [ 1504.188872] ? __check_object_size+0x179/0x230 [ 1504.193461] netlink_sendmsg+0x62e/0xb80 [ 1504.197511] ? nlmsg_notify+0x170/0x170 [ 1504.201493] ? security_socket_sendmsg+0x83/0xb0 [ 1504.206241] ? nlmsg_notify+0x170/0x170 [ 1504.210209] sock_sendmsg+0xb5/0x100 [ 1504.213918] SyS_sendto+0x1c7/0x2c0 [ 1504.217545] ? SyS_getpeername+0x220/0x220 [ 1504.221789] ? task_work_run+0xfd/0x190 [ 1504.225778] ? up_read+0x17/0x30 [ 1504.229138] ? __do_page_fault+0x159/0xad0 [ 1504.233376] ? do_syscall_64+0x4c/0x640 [ 1504.237356] ? SyS_getpeername+0x220/0x220 [ 1504.241583] do_syscall_64+0x1d5/0x640 [ 1504.245470] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1504.250649] RIP: 0033:0x4193fc [ 1504.253934] RSP: 002b:00007ffef41353b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1504.261647] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193fc [ 1504.268917] RDX: 0000000000000028 RSI: 00000000014a4370 RDI: 0000000000000003 [ 1504.276177] RBP: 0000000000000000 R08: 00007ffef4135404 R09: 000000000000000c [ 1504.283522] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1504.290780] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1504.307499] Mem-Info: [ 1504.309944] active_anon:13866 inactive_anon:6741 isolated_anon:0 [ 1504.309944] active_file:9 inactive_file:39 isolated_file:0 [ 1504.309944] unevictable:0 dirty:10 writeback:17 unstable:0 [ 1504.309944] slab_reclaimable:20504 slab_unreclaimable:107115 [ 1504.309944] mapped:46191 shmem:6929 pagetables:651 bounce:0 [ 1504.309944] free:25163 free_pcp:0 free_cma:0 [ 1504.343361] Node 0 active_anon:53928kB inactive_anon:26944kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184692kB dirty:0kB writeback:0kB shmem:27692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1504.371216] Node 1 active_anon:1400kB inactive_anon:16kB active_file:28kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:0kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1504.398089] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1504.424482] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1504.429602] Node 0 DMA32 free:35908kB min:36200kB low:45248kB high:54296kB active_anon:53928kB inactive_anon:26944kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7040kB pagetables:2308kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1504.459165] lowmem_reserve[]: 0 0 0 0 0 [ 1504.463170] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1504.488795] lowmem_reserve[]: 0 0 0 0 0 [ 1504.492812] Node 1 Normal free:53236kB min:53696kB low:67120kB high:80544kB active_anon:1400kB inactive_anon:16kB active_file:28kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1504.521268] lowmem_reserve[]: 0 0 0 0 0 [ 1504.525272] Node 0 DMA: 1*4kB (E) 5*8kB (UE) 7*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11036kB [ 1504.540568] Node 0 DMA32: 2797*4kB (UME) 924*8kB (UME) 135*16kB (UME) 4*32kB (UME) 15*64kB (ME) 2*128kB (UM) 0*256kB 19*512kB (U) 2*1024kB (U) 1*2048kB (U) 0*4096kB = 35908kB [ 1504.556580] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1504.567399] Node 1 Normal: 80*4kB (UM) 63*8kB (M) 59*16kB (M) 49*32kB (UM) 38*64kB (M) 27*128kB (UM) 16*256kB (UM) 10*512kB (M) 8*1024kB (UM) 1*2048kB (M) 6*4096kB (U) = 53256kB [ 1504.585650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1504.595177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1504.604352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1504.613371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1504.622034] 6985 total pagecache pages [ 1504.625928] 0 pages in swap cache [ 1504.629441] Swap cache stats: add 0, delete 0, find 0/0 [ 1504.634883] Free swap = 0kB [ 1504.637957] Total swap = 0kB [ 1504.641188] 2097051 pages RAM [ 1504.644296] 0 pages HighMem/MovableOnly [ 1504.648346] 363840 pages reserved [ 1504.651800] 0 pages cma reserved [ 1504.655189] Out of memory (oom_kill_allocating_task): Kill process 13047 (syz-executor.0) score 0 or sacrifice child [ 1504.666244] Killed process 13047 (syz-executor.0) total-vm:93120kB, anon-rss:80kB, file-rss:33796kB, shmem-rss:0kB [ 1504.690686] oom_reaper: reaped process 13047 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1504.735728] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1504.748144] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1504.753507] CPU: 1 PID: 4245 Comm: ion_system_heap Not tainted 4.14.226-syzkaller #0 [ 1504.761385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1504.770740] Call Trace: [ 1504.773417] dump_stack+0x1b2/0x281 [ 1504.777043] dump_header+0x178/0x82f [ 1504.780752] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1504.785856] ? ___ratelimit+0x2cd/0x530 [ 1504.789831] oom_kill_process.cold+0x10/0xb18 [ 1504.794324] ? lock_downgrade+0x740/0x740 [ 1504.798476] out_of_memory+0x2dc/0x1190 [ 1504.802451] ? oom_killer_disable+0x1c0/0x1c0 [ 1504.806945] ? mutex_trylock+0x152/0x1a0 [ 1504.811004] __alloc_pages_nodemask+0x23e1/0x2720 [ 1504.815860] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1504.820735] ? ion_heap_sglist_zero+0x165/0x220 [ 1504.825405] ? cache_grow_begin+0x41/0x630 [ 1504.829666] cache_grow_begin+0x91/0x630 [ 1504.833724] ? cache_grow_begin+0x91/0x630 [ 1504.837972] fallback_alloc+0x207/0x2c0 [ 1504.841966] kmem_cache_alloc_node_trace+0xed/0x400 [ 1504.846994] __get_vm_area_node+0xed/0x340 [ 1504.851225] vmap+0xd5/0x290 [ 1504.854238] ? ion_heap_clear_pages+0x23/0x70 [ 1504.858732] ? vunmap+0x50/0x50 [ 1504.862005] ? __vunmap+0x21c/0x300 [ 1504.865633] ion_heap_clear_pages+0x23/0x70 [ 1504.869950] ion_heap_sglist_zero+0x165/0x220 [ 1504.874463] ? ion_heap_clear_pages+0x70/0x70 [ 1504.878958] ? finish_task_switch+0x178/0x610 [ 1504.883467] ? pagerange_is_ram_callback+0x100/0x100 [ 1504.888654] ? ion_heap_deferred_free+0x222/0x470 [ 1504.893512] ion_system_heap_free+0x1d0/0x240 [ 1504.898028] ion_buffer_destroy+0x132/0x190 [ 1504.902351] ion_heap_deferred_free+0x22a/0x470 [ 1504.907030] ? __schedule+0x847/0x1de0 [ 1504.910917] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1504.915651] ? wait_woken+0x230/0x230 [ 1504.919472] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1504.924575] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1504.929239] kthread+0x30d/0x420 [ 1504.932600] ? kthread_create_on_node+0xd0/0xd0 [ 1504.937265] ret_from_fork+0x24/0x30 [ 1505.100793] Mem-Info: [ 1505.103341] active_anon:13818 inactive_anon:6740 isolated_anon:0 [ 1505.103341] active_file:0 inactive_file:39 isolated_file:0 [ 1505.103341] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1505.103341] slab_reclaimable:20498 slab_unreclaimable:106879 [ 1505.103341] mapped:46183 shmem:6928 pagetables:651 bounce:0 [ 1505.103341] free:25098 free_pcp:30 free_cma:0 [ 1505.139490] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1505.141426] Node 0 active_anon:53880kB inactive_anon:26944kB active_file:56kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184732kB dirty:0kB writeback:0kB shmem:27692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1505.181198] Node 1 active_anon:1392kB inactive_anon:16kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1505.213068] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.247316] Bluetooth: hci0 command 0x040f tx timeout [ 1505.252611] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1505.263254] Node 0 DMA32 free:36072kB min:36200kB low:45248kB high:54296kB active_anon:53880kB inactive_anon:26944kB active_file:40kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7040kB pagetables:2308kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1505.301526] lowmem_reserve[]: 0 0 0 0 0 [ 1505.305539] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.335642] lowmem_reserve[]: 0 0 0 0 0 [ 1505.340311] Node 1 Normal free:53284kB min:53696kB low:67120kB high:80544kB active_anon:1392kB inactive_anon:16kB active_file:4kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.371465] lowmem_reserve[]: 0 0 0 0 0 [ 1505.371487] Node 0 DMA: 1*4kB (E) 5*8kB (UE) 7*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11036kB [ 1505.371559] Node 0 DMA32: 2796*4kB (UME) 941*8kB (UME) 137*16kB (UME) 4*32kB (UME) 15*64kB (ME) 2*128kB (UM) 0*256kB 19*512kB (U) 2*1024kB (U) 1*2048kB (U) 0*4096kB = 36072kB [ 1505.422243] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1505.442366] Node 1 Normal: 81*4kB (UM) 64*8kB (UM) 58*16kB (M) 48*32kB (UM) 37*64kB (M) 26*128kB (UM) 17*256kB (UM) 10*512kB (M) 8*1024kB (UM) 1*2048kB (M) 6*4096kB (U) = 53284kB [ 1505.468696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.484306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1505.494346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.509941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1505.520810] 6962 total pagecache pages [ 1505.524713] 0 pages in swap cache [ 1505.531229] Swap cache stats: add 0, delete 0, find 0/0 [ 1505.542406] Free swap = 0kB [ 1505.545444] Total swap = 0kB [ 1505.551016] 2097051 pages RAM [ 1505.554126] 0 pages HighMem/MovableOnly [ 1505.561038] 363840 pages reserved [ 1505.564497] 0 pages cma reserved [ 1505.573296] Out of memory: Kill process 13029 (syz-executor.2) score 1005 or sacrifice child [ 1505.584475] Killed process 13030 (syz-executor.2) total-vm:93252kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 1505.618926] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1505.633751] in:imklog cpuset=/ mems_allowed=0-1 [ 1505.638568] CPU: 0 PID: 13183 Comm: in:imklog Not tainted 4.14.226-syzkaller #0 [ 1505.646029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1505.655387] Call Trace: [ 1505.657986] dump_stack+0x1b2/0x281 [ 1505.661633] dump_header+0x178/0x82f [ 1505.665349] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1505.670448] ? ___ratelimit+0x2cd/0x530 [ 1505.674509] oom_kill_process.cold+0x10/0xb18 [ 1505.679018] out_of_memory+0xe3e/0x1190 [ 1505.683005] ? oom_killer_disable+0x1c0/0x1c0 [ 1505.687501] ? mutex_trylock+0x152/0x1a0 [ 1505.691645] __alloc_pages_nodemask+0x23e1/0x2720 [ 1505.696512] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1505.701375] alloc_pages_current+0x155/0x260 [ 1505.705814] filemap_fault+0xea3/0x1980 [ 1505.709833] ext4_filemap_fault+0x84/0xb0 [ 1505.713991] __do_fault+0xfa/0x380 [ 1505.717538] __handle_mm_fault+0x2497/0x4620 [ 1505.721928] ? vm_insert_page+0x7c0/0x7c0 [ 1505.726068] ? lock_downgrade+0x740/0x740 [ 1505.730212] handle_mm_fault+0x391/0x860 [ 1505.734252] __do_page_fault+0x549/0xad0 [ 1505.738304] ? spurious_fault+0x640/0x640 [ 1505.742443] ? do_page_fault+0x60/0x500 [ 1505.746400] ? page_fault+0x2f/0x50 [ 1505.750020] page_fault+0x45/0x50 [ 1505.753450] RIP: 1fa0:0x1f9f [ 1505.756460] RSP: 0000:000055c5ae57f9d0 EFLAGS: 7f80e92ddda0 [ 1505.756625] Mem-Info: [ 1505.762737] syz-executor.2: page allocation failure: order:0 [ 1505.764776] active_anon:13818 inactive_anon:6740 isolated_anon:0 [ 1505.764776] active_file:21 inactive_file:13 isolated_file:0 [ 1505.764776] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1505.764776] slab_reclaimable:20498 slab_unreclaimable:106885 [ 1505.764776] mapped:46173 shmem:6928 pagetables:651 bounce:0 [ 1505.764776] free:13954 free_pcp:82 free_cma:0 [ 1505.764792] Node 0 active_anon:53880kB inactive_anon:26944kB active_file:92kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184692kB dirty:0kB writeback:0kB shmem:27692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1505.782946] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1505.803697] Node 1 active_anon:1392kB inactive_anon:16kB active_file:0kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1505.803703] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.803720] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1505.803740] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:53880kB inactive_anon:26944kB active_file:92kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7040kB pagetables:2308kB bounce:0kB free_pcp:144kB local_pcp:120kB free_cma:0kB [ 1505.803759] lowmem_reserve[]: 0 0 0 0 0 [ 1505.803778] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.803794] lowmem_reserve[]: 0 [ 1505.847690] (null) [ 1505.864938] 0 0 0 0 [ 1505.864957] Node 1 Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:1392kB inactive_anon:16kB active_file:0kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:296kB bounce:0kB free_pcp:184kB local_pcp:64kB free_cma:0kB [ 1505.864977] lowmem_reserve[]: 0 0 0 0 0 [ 1505.864996] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 5*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) [ 1505.895606] syz-executor.2 cpuset= [ 1505.908127] 4*512kB [ 1505.933625] / [ 1505.963630] (UE) [ 1505.996098] mems_allowed=0-1 [ 1506.016833] 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 1506.022439] CPU: 1 PID: 13030 Comm: syz-executor.2 Not tainted 4.14.226-syzkaller #0 [ 1506.023617] Node 0 [ 1506.031578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1506.031583] Call Trace: [ 1506.031606] dump_stack+0x1b2/0x281 [ 1506.031619] warn_alloc.cold+0x96/0x1cc [ 1506.031631] ? zone_watermark_ok_safe+0x220/0x220 [ 1506.031640] ? usleep_range+0x130/0x130 [ 1506.031648] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1506.031659] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1506.031670] ? run_timer_softirq+0x5a0/0x5a0 [ 1506.031685] __alloc_pages_nodemask+0x2127/0x2720 [ 1506.031700] ? lock_acquire+0x170/0x3f0 [ 1506.031715] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1506.031727] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1506.031742] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1506.031760] alloc_pages_current+0x155/0x260 [ 1506.042775] DMA32: [ 1506.043425] ion_page_pool_alloc+0x118/0x1b0 [ 1506.045982] 2431*4kB [ 1506.049595] ion_system_heap_allocate+0x133/0x8c0 [ 1506.049606] ? ion_alloc+0x187/0x810 [ 1506.049616] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1506.049626] ? ion_system_contig_heap_create+0x130/0x130 [ 1506.049636] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1506.049647] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1506.049659] ion_alloc+0x204/0x810 [ 1506.053611] (UME) [ 1506.058473] ? ion_dma_buf_release+0x40/0x40 [ 1506.058485] ? __might_fault+0x177/0x1b0 [ 1506.058497] ion_ioctl+0xea/0x1f0 [ 1506.058506] ? ion_query_heaps+0x360/0x360 [ 1506.058517] ? ion_query_heaps+0x360/0x360 [ 1506.058526] do_vfs_ioctl+0x75a/0xff0 [ 1506.058538] ? ioctl_preallocate+0x1a0/0x1a0 [ 1506.058548] ? lock_downgrade+0x740/0x740 [ 1506.058560] ? __fget+0x225/0x360 [ 1506.058569] ? do_vfs_ioctl+0xff0/0xff0 [ 1506.058581] ? security_file_ioctl+0x83/0xb0 [ 1506.071145] 818*8kB [ 1506.072655] SyS_ioctl+0x7f/0xb0 [ 1506.079318] (UME) [ 1506.083259] ? do_vfs_ioctl+0xff0/0xff0 [ 1506.093478] 114*16kB [ 1506.096526] do_syscall_64+0x1d5/0x640 [ 1506.096546] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1506.096555] RIP: 0033:0x465f69 [ 1506.096560] RSP: 002b:00007f51b8dd6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1506.103447] (UME) [ 1506.106452] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1506.115953] 0*32kB [ 1506.120367] RDX: 0000000020000240 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1506.120373] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1506.120377] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1506.120382] R13: 00007ffd73bd643f R14: 00007f51b8dd6300 R15: 0000000000022000 [ 1506.130019] Mem-Info: [ 1506.146709] 0*64kB [ 1506.152991] active_anon:13818 inactive_anon:6740 isolated_anon:0 [ 1506.152991] active_file:20 inactive_file:14 isolated_file:0 [ 1506.152991] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1506.152991] slab_reclaimable:20498 slab_unreclaimable:106885 [ 1506.152991] mapped:46173 shmem:6928 pagetables:651 bounce:0 [ 1506.152991] free:13954 free_pcp:82 free_cma:0 [ 1506.155156] 0*128kB [ 1506.159282] Node 0 active_anon:53880kB inactive_anon:26944kB active_file:56kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184692kB dirty:0kB writeback:0kB shmem:27692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1506.172042] 0*256kB [ 1506.178669] Node 1 active_anon:1392kB inactive_anon:16kB active_file:24kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1506.181612] 0*512kB [ 1506.184136] Node 0 [ 1506.199420] 0*1024kB [ 1506.204759] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1506.212293] 0*2048kB [ 1506.216541] lowmem_reserve[]: [ 1506.223769] 0*4096kB [ 1506.237673] 0 [ 1506.248411] = 18092kB [ 1506.254250] 2717 [ 1506.266184] Node 0 [ 1506.275581] 2718 [ 1506.283918] Normal: [ 1506.321418] 2718 [ 1506.345731] 0*4kB [ 1506.372533] 2718 [ 1506.385031] 0*8kB [ 1506.419886] 0*16kB [ 1506.426158] Node 0 [ 1506.430386] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1506.438642] DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:53880kB inactive_anon:26944kB active_file:56kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7040kB pagetables:2308kB bounce:0kB free_pcp:144kB local_pcp:24kB free_cma:0kB [ 1506.449293] Node 1 Normal: 79*4kB (UM) 64*8kB (UM) 58*16kB (M) 47*32kB (M) 37*64kB (M) 25*128kB (M) 16*256kB (M) 11*512kB (UM) 8*1024kB (UM) 0*2048kB 0*4096kB = 26748kB [ 1506.480403] lowmem_reserve[]: 0 0 0 0 0 [ 1506.495478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1506.507110] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1506.513150] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1506.544543] lowmem_reserve[]: 0 0 0 0 0 [ 1506.547964] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1506.555566] Node 1 [ 1506.561861] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1506.562565] Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:1392kB inactive_anon:16kB active_file:24kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:296kB bounce:0kB free_pcp:184kB local_pcp:120kB free_cma:0kB [ 1506.564103] 6962 total pagecache pages [ 1506.577020] lowmem_reserve[]: [ 1506.603007] 0 pages in swap cache [ 1506.611242] Swap cache stats: add 0, delete 0, find 0/0 [ 1506.618400] 0 0 0 0 0 [ 1506.618973] Free swap = 0kB [ 1506.620927] Node 0 [ 1506.623925] Total swap = 0kB [ 1506.623932] DMA: [ 1506.626155] 2097051 pages RAM [ 1506.634391] 0 pages HighMem/MovableOnly [ 1506.639814] 2*4kB (UE) 1*8kB (E) 5*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 1506.640702] 363840 pages reserved [ 1506.662749] Node 0 DMA32: 2431*4kB (UME) 818*8kB (UME) 114*16kB (UME) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18092kB [ 1506.663217] 0 pages cma reserved [ 1506.681755] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1506.684219] Out of memory (oom_kill_allocating_task): Kill process 13183 (in:imklog) score 0 or sacrifice child [ 1506.701543] Node 1 Normal: 79*4kB (UM) 64*8kB (UM) 58*16kB (M) 47*32kB (M) 37*64kB (M) 25*128kB (M) 16*256kB (M) 11*512kB (UM) 8*1024kB (UM) 0*2048kB 0*4096kB = 26748kB [ 1506.708367] Killed process 13101 (rsyslogd) total-vm:254332kB, anon-rss:672kB, file-rss:0kB, shmem-rss:0kB [ 1506.728972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1506.750583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1506.761605] oom_reaper: reaped process 13030 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1506.766551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1506.792524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1506.803714] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1506.841223] 6962 total pagecache pages [ 1506.845145] 0 pages in swap cache [ 1506.855231] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1506.864530] CPU: 1 PID: 7957 Comm: syz-fuzzer Not tainted 4.14.226-syzkaller #0 [ 1506.864990] Swap cache stats: add 0, delete 0, find 0/0 [ 1506.871991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1506.871996] Call Trace: [ 1506.872017] dump_stack+0x1b2/0x281 [ 1506.872029] dump_header+0x178/0x82f [ 1506.872039] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1506.872048] ? ___ratelimit+0x2cd/0x530 [ 1506.872058] oom_kill_process.cold+0x10/0xb18 [ 1506.872076] out_of_memory+0xe3e/0x1190 [ 1506.872089] ? oom_killer_disable+0x1c0/0x1c0 [ 1506.872096] ? mutex_trylock+0x152/0x1a0 [ 1506.872106] __alloc_pages_nodemask+0x23e1/0x2720 [ 1506.872122] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1506.872141] alloc_pages_current+0x155/0x260 [ 1506.872150] filemap_fault+0xea3/0x1980 [ 1506.872166] ext4_filemap_fault+0x84/0xb0 [ 1506.872175] __do_fault+0xfa/0x380 [ 1506.872183] __handle_mm_fault+0x2497/0x4620 [ 1506.872191] ? vm_insert_page+0x7c0/0x7c0 [ 1506.872200] ? lock_downgrade+0x740/0x740 [ 1506.872216] handle_mm_fault+0x391/0x860 [ 1506.872227] __do_page_fault+0x549/0xad0 [ 1506.872237] ? spurious_fault+0x640/0x640 [ 1506.872246] ? do_page_fault+0x60/0x500 [ 1506.872253] ? page_fault+0x2f/0x50 [ 1506.872259] page_fault+0x45/0x50 [ 1506.872267] RIP: 0000:0x93f280 [ 1506.872270] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1506.885034] Mem-Info: [ 1506.904325] Free swap = 0kB [ 1506.917082] active_anon:12982 inactive_anon:6740 isolated_anon:0 [ 1506.917082] active_file:20 inactive_file:14 isolated_file:0 [ 1506.917082] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1506.917082] slab_reclaimable:20498 slab_unreclaimable:106885 [ 1506.917082] mapped:37473 shmem:6928 pagetables:651 bounce:0 [ 1506.917082] free:14842 free_pcp:38 free_cma:0 [ 1506.936065] Total swap = 0kB [ 1506.948291] Node 0 active_anon:50936kB inactive_anon:26944kB active_file:56kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149892kB dirty:0kB writeback:0kB shmem:27692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1506.966020] 2097051 pages RAM [ 1506.984880] Node 1 active_anon:992kB inactive_anon:16kB active_file:24kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1507.002472] 0 pages HighMem/MovableOnly [ 1507.046700] Node 0 [ 1507.073580] 363840 pages reserved [ 1507.113882] 0 pages cma reserved [ 1507.197325] syz-executor.0 (13047) used greatest stack depth: 23984 bytes left [ 1507.242828] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1507.307267] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1507.314165] Node 0 DMA32 free:34576kB min:36200kB low:45248kB high:54296kB active_anon:50920kB inactive_anon:26944kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6912kB pagetables:2184kB bounce:0kB free_pcp:892kB local_pcp:156kB free_cma:0kB [ 1507.344806] lowmem_reserve[]: 0 0 0 0 0 [ 1507.349445] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1507.446578] lowmem_reserve[]: 0 0 0 0 0 [ 1507.450603] Node 1 Normal free:316152kB min:53696kB low:67120kB high:80544kB active_anon:1372kB inactive_anon:16kB active_file:4620kB inactive_file:7968kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:208kB bounce:0kB free_pcp:304kB local_pcp:44kB free_cma:0kB [ 1507.535535] lowmem_reserve[]: 0 0 0 0 0 [ 1507.557265] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 5*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 1507.575268] Node 0 DMA32: 2591*4kB (UME) 3070*8kB (UME) 164*16kB (UME) 22*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 3*1024kB (U) 2*2048kB (UM) 0*4096kB = 45420kB [ 1507.629911] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1507.656578] Node 1 Normal: 3*4kB (UME) 1*8kB (U) 1*16kB (M) 1*32kB (M) 0*64kB 3*128kB (UME) 3*256kB (UME) 10*512kB (UME) 123*1024kB (UME) 66*2048kB (UME) 18*4096kB (U) = 341188kB [ 1507.690510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1507.700456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1507.736259] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1507.769702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1507.789938] 10660 total pagecache pages [ 1507.793945] 0 pages in swap cache [ 1507.819757] Swap cache stats: add 0, delete 0, find 0/0 [ 1507.825165] Free swap = 0kB [ 1507.830482] Total swap = 0kB [ 1507.834080] 2097051 pages RAM [ 1507.840905] 0 pages HighMem/MovableOnly [ 1507.845451] 363840 pages reserved [ 1507.867934] 0 pages cma reserved [ 1507.871365] Out of memory (oom_kill_allocating_task): Kill process 7957 (syz-fuzzer) score 0 or sacrifice child [ 1507.919954] Killed process 13229 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:940kB, shmem-rss:0kB [ 1507.942192] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1507.965415] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1507.970470] CPU: 1 PID: 7957 Comm: syz-fuzzer Not tainted 4.14.226-syzkaller #0 [ 1507.978086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1507.987437] Call Trace: [ 1507.990065] dump_stack+0x1b2/0x281 [ 1507.993706] dump_header+0x178/0x82f [ 1507.997410] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1508.002507] ? ___ratelimit+0x2cd/0x530 [ 1508.006474] oom_kill_process.cold+0x10/0xb18 [ 1508.010979] out_of_memory+0xe3e/0x1190 [ 1508.014951] ? oom_killer_disable+0x1c0/0x1c0 [ 1508.019440] ? mutex_trylock+0x152/0x1a0 [ 1508.023517] __alloc_pages_nodemask+0x23e1/0x2720 [ 1508.028364] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1508.033219] alloc_pages_current+0x155/0x260 [ 1508.037639] filemap_fault+0xea3/0x1980 [ 1508.041631] ext4_filemap_fault+0x84/0xb0 [ 1508.045780] __do_fault+0xfa/0x380 [ 1508.049326] __handle_mm_fault+0x2497/0x4620 [ 1508.053728] ? vm_insert_page+0x7c0/0x7c0 [ 1508.057893] ? lock_downgrade+0x740/0x740 [ 1508.062057] handle_mm_fault+0x391/0x860 [ 1508.066120] __do_page_fault+0x549/0xad0 [ 1508.070181] ? spurious_fault+0x640/0x640 [ 1508.074326] ? do_page_fault+0x60/0x500 [ 1508.078310] ? page_fault+0x2f/0x50 [ 1508.081929] page_fault+0x45/0x50 [ 1508.085369] RIP: 0000:0x93f280 [ 1508.088545] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1508.102654] syz-executor.2: [ 1508.110257] Mem-Info: [ 1508.115690] active_anon:13220 inactive_anon:6737 isolated_anon:0 [ 1508.115690] active_file:39 inactive_file:24 isolated_file:0 [ 1508.115690] unevictable:0 dirty:39 writeback:0 unstable:0 [ 1508.115690] slab_reclaimable:20123 slab_unreclaimable:108707 [ 1508.115690] mapped:37524 shmem:6924 pagetables:652 bounce:0 [ 1508.115690] free:19053 free_pcp:227 free_cma:0 [ 1508.151907] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1508.162428] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1508.166459] Node 0 active_anon:51060kB inactive_anon:26940kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124312kB dirty:0kB writeback:0kB shmem:27688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1508.171839] CPU: 1 PID: 13030 Comm: syz-executor.2 Not tainted 4.14.226-syzkaller #0 [ 1508.203227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1508.210602] Node 1 active_anon:1820kB inactive_anon:8kB active_file:240kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25784kB dirty:156kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1508.212579] Call Trace: [ 1508.241919] dump_stack+0x1b2/0x281 [ 1508.245557] warn_alloc.cold+0x96/0x1cc [ 1508.249548] ? zone_watermark_ok_safe+0x220/0x220 [ 1508.249898] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.254423] __alloc_pages_nodemask+0x2127/0x2720 [ 1508.254441] ? lock_acquire+0x170/0x3f0 [ 1508.289364] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1508.291250] lowmem_reserve[]: 0 [ 1508.294212] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1508.294220] 2717 [ 1508.297491] ? __mutex_unlock_slowpath+0x75/0x770 [ 1508.297506] alloc_pages_current+0x155/0x260 [ 1508.297521] ion_page_pool_alloc+0x118/0x1b0 [ 1508.297532] ion_system_heap_allocate+0x133/0x8c0 [ 1508.297542] ? _raw_spin_unlock+0x29/0x40 [ 1508.297551] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1508.297561] ? ion_system_contig_heap_create+0x130/0x130 [ 1508.297572] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1508.297584] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1508.312759] 2718 [ 1508.314408] ion_alloc+0x27a/0x810 [ 1508.319818] 2718 [ 1508.323637] ? ion_dma_buf_release+0x40/0x40 [ 1508.336153] 2718 [ 1508.338122] ? __might_fault+0x177/0x1b0 [ 1508.338137] ion_ioctl+0xea/0x1f0 [ 1508.338148] ? ion_query_heaps+0x360/0x360 [ 1508.338160] ? ion_query_heaps+0x360/0x360 [ 1508.338169] do_vfs_ioctl+0x75a/0xff0 [ 1508.338180] ? ioctl_preallocate+0x1a0/0x1a0 [ 1508.338190] ? lock_downgrade+0x740/0x740 [ 1508.338203] ? __fget+0x225/0x360 [ 1508.348045] ? do_vfs_ioctl+0xff0/0xff0 [ 1508.348056] ? security_file_ioctl+0x83/0xb0 [ 1508.348065] SyS_ioctl+0x7f/0xb0 [ 1508.348073] ? do_vfs_ioctl+0xff0/0xff0 [ 1508.348084] do_syscall_64+0x1d5/0x640 [ 1508.348100] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1508.348108] RIP: 0033:0x465f69 [ 1508.348113] RSP: 002b:00007f51b8dd6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1508.348123] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1508.348129] RDX: 0000000020000240 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1508.348134] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1508.348139] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1508.348145] R13: 00007ffd73bd643f R14: 00007f51b8dd6300 R15: 0000000000022000 [ 1508.362728] Mem-Info: [ 1508.377155] Node 0 [ 1508.384691] active_anon:13220 inactive_anon:6737 isolated_anon:0 [ 1508.384691] active_file:60 inactive_file:7 isolated_file:0 [ 1508.384691] unevictable:0 dirty:39 writeback:0 unstable:0 [ 1508.384691] slab_reclaimable:20123 slab_unreclaimable:108707 [ 1508.384691] mapped:37524 shmem:6924 pagetables:652 bounce:0 [ 1508.384691] free:19161 free_pcp:78 free_cma:0 [ 1508.393565] DMA32 free:36016kB min:36200kB low:45248kB high:54296kB active_anon:51060kB inactive_anon:26940kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6912kB pagetables:2196kB bounce:0kB free_pcp:260kB local_pcp:260kB free_cma:0kB [ 1508.396547] Node 0 active_anon:51060kB inactive_anon:26940kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124312kB dirty:0kB writeback:0kB shmem:27688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1508.403486] lowmem_reserve[]: [ 1508.415556] Node 1 active_anon:1820kB inactive_anon:8kB active_file:240kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25784kB dirty:156kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1508.424099] 0 [ 1508.447339] Node 0 [ 1508.457283] 0 [ 1508.473585] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.510154] 0 [ 1508.550715] lowmem_reserve[]: [ 1508.565724] 0 [ 1508.597740] 0 [ 1508.610203] 0 [ 1508.631608] 2717 2718 2718 2718 [ 1508.640596] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.642866] Node 0 DMA32 free:36016kB min:36200kB low:45248kB high:54296kB active_anon:51060kB inactive_anon:26940kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6912kB pagetables:2196kB bounce:0kB free_pcp:260kB local_pcp:0kB free_cma:0kB [ 1508.679069] lowmem_reserve[]: 0 0 0 0 0 [ 1508.711642] lowmem_reserve[]: 0 0 0 0 0 [ 1508.714180] Node 1 Normal free:29652kB min:53696kB low:67120kB high:80544kB active_anon:1820kB inactive_anon:8kB active_file:176kB inactive_file:28kB unevictable:0kB writepending:156kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:412kB bounce:0kB free_pcp:52kB local_pcp:52kB free_cma:0kB [ 1508.751185] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.759586] lowmem_reserve[]: 0 0 0 0 0 [ 1508.787469] lowmem_reserve[]: 0 0 0 0 0 [ 1508.789637] Node 0 [ 1508.793587] Node 1 [ 1508.793589] DMA: 2*4kB [ 1508.795829] Normal free:29652kB min:53696kB low:67120kB high:80544kB active_anon:1820kB inactive_anon:8kB active_file:176kB inactive_file:200kB unevictable:0kB writepending:156kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:412kB bounce:0kB free_pcp:52kB local_pcp:0kB free_cma:0kB [ 1508.806405] (UE) 1*8kB (E) 5*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 1508.837458] lowmem_reserve[]: [ 1508.855280] Node 0 [ 1508.857503] 0 [ 1508.860513] DMA32: [ 1508.860798] 0 [ 1508.862462] 2871*4kB [ 1508.864730] 0 [ 1508.866445] (UME) 2545*8kB (UMEH) 208*16kB (UME) 27*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36036kB [ 1508.876709] 0 0 [ 1508.889293] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 5*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 1508.894773] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1508.910036] Node 0 DMA32: 2779*4kB (UME) 2602*8kB (UMEH) 212*16kB (UME) 27*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36188kB [ 1508.921370] Node 1 Normal: 166*4kB (UME) 132*8kB (UME) 96*16kB (UME) 68*32kB (UM) 45*64kB (UME) 22*128kB (UME) 12*256kB (ME) 9*512kB (ME) 9*1024kB (UME) 1*2048kB (M) 0*4096kB = 30072kB [ 1508.937822] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1508.952727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1508.964071] Node 1 Normal: 166*4kB (UME) [ 1508.965604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1508.978172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1508.986918] 132*8kB (UME) 96*16kB (UME) 68*32kB (UM) 45*64kB (UME) 22*128kB (UME) 12*256kB (ME) 9*512kB (ME) 9*1024kB (UME) 1*2048kB (M) 0*4096kB = 30072kB [ 1508.993298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.010959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.018167] 7004 total pagecache pages [ 1509.023676] 0 pages in swap cache [ 1509.025609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.033398] Swap cache stats: add 0, delete 0, find 0/0 [ 1509.035948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.043461] Free swap = 0kB [ 1509.061880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.061949] Total swap = 0kB [ 1509.075781] 2097051 pages RAM [ 1509.076743] 7004 total pagecache pages [ 1509.082809] 0 pages in swap cache [ 1509.085553] 0 pages HighMem/MovableOnly [ 1509.086270] Swap cache stats: add 0, delete 0, find 0/0 [ 1509.093526] 363840 pages reserved [ 1509.102752] Free swap = 0kB [ 1509.105746] 0 pages cma reserved [ 1509.106943] Total swap = 0kB [ 1509.111304] Out of memory (oom_kill_allocating_task): Kill process 7957 (syz-fuzzer) score 0 or sacrifice child [ 1509.113870] 2097051 pages RAM [ 1509.131293] Killed process 7975 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1509.145517] 0 pages HighMem/MovableOnly [ 1509.155566] oom_reaper: reaped process 13229 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1509.165748] 363840 pages reserved [ 1509.177522] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1509.198486] 0 pages cma reserved [ 1509.216536] in:imklog cpuset=/ mems_allowed=0-1 [ 1509.221256] CPU: 1 PID: 13233 Comm: in:imklog Not tainted 4.14.226-syzkaller #0 [ 1509.228690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1509.238143] Call Trace: [ 1509.240735] dump_stack+0x1b2/0x281 [ 1509.244538] dump_header+0x178/0x82f [ 1509.248252] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1509.253356] ? ___ratelimit+0x2cd/0x530 [ 1509.257344] oom_kill_process.cold+0x10/0xb18 [ 1509.261842] out_of_memory+0xe3e/0x1190 [ 1509.265812] ? oom_killer_disable+0x1c0/0x1c0 [ 1509.270310] ? mutex_trylock+0x152/0x1a0 [ 1509.274368] __alloc_pages_nodemask+0x23e1/0x2720 [ 1509.279227] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1509.284091] alloc_pages_current+0x155/0x260 [ 1509.288494] filemap_fault+0xea3/0x1980 [ 1509.292474] ext4_filemap_fault+0x84/0xb0 [ 1509.296699] __do_fault+0xfa/0x380 [ 1509.300241] __handle_mm_fault+0x2497/0x4620 [ 1509.304643] ? vm_insert_page+0x7c0/0x7c0 [ 1509.308788] ? lock_downgrade+0x740/0x740 [ 1509.312966] handle_mm_fault+0x391/0x860 [ 1509.317030] __do_page_fault+0x549/0xad0 [ 1509.321089] ? spurious_fault+0x640/0x640 [ 1509.325227] ? do_page_fault+0x60/0x500 [ 1509.329198] ? page_fault+0x2f/0x50 [ 1509.332819] page_fault+0x45/0x50 [ 1509.336258] RIP: 1915bda3:0x1f9f [ 1509.339606] RSP: 0000:0000000000000003 EFLAGS: 7f8e1915bda0 [ 1509.355036] Mem-Info: [ 1509.363298] active_anon:13220 inactive_anon:6737 isolated_anon:0 [ 1509.363298] active_file:33 inactive_file:26 isolated_file:0 [ 1509.363298] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1509.363298] slab_reclaimable:20084 slab_unreclaimable:108402 [ 1509.363298] mapped:28814 shmem:6924 pagetables:630 bounce:0 [ 1509.363298] free:18881 free_pcp:53 free_cma:0 [ 1509.407297] Node 0 active_anon:51060kB inactive_anon:26940kB active_file:4kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115212kB dirty:0kB writeback:0kB shmem:27688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1509.426584] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1509.448526] Node 1 active_anon:1752kB inactive_anon:8kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1509.464885] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1509.496230] CPU: 0 PID: 13030 Comm: syz-executor.2 Not tainted 4.14.226-syzkaller #0 [ 1509.498584] Node 0 [ 1509.504103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1509.504109] Call Trace: [ 1509.506348] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.515698] dump_stack+0x1b2/0x281 [ 1509.515712] warn_alloc.cold+0x96/0x1cc [ 1509.515724] ? zone_watermark_ok_safe+0x220/0x220 [ 1509.515733] ? usleep_range+0x130/0x130 [ 1509.515745] ? try_to_free_pages+0x23f/0x6e0 [ 1509.518324] lowmem_reserve[]: [ 1509.543916] ? _find_next_bit+0xdb/0x100 [ 1509.543928] ? run_timer_softirq+0x5a0/0x5a0 [ 1509.543945] __alloc_pages_nodemask+0x2127/0x2720 [ 1509.543967] ? lock_acquire+0x170/0x3f0 [ 1509.547602] 0 [ 1509.551556] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1509.556375] 2717 [ 1509.560353] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1509.560368] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1509.560388] alloc_pages_current+0x155/0x260 [ 1509.560402] ion_page_pool_alloc+0x118/0x1b0 [ 1509.564788] 2718 [ 1509.567893] ion_system_heap_allocate+0x133/0x8c0 [ 1509.567906] ? _raw_spin_unlock+0x29/0x40 [ 1509.567918] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1509.571954] 2718 [ 1509.576362] ? ion_system_contig_heap_create+0x130/0x130 [ 1509.581240] 2718 [ 1509.585192] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1509.591796] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1509.593830] Node 0 [ 1509.598314] ion_alloc+0x27a/0x810 [ 1509.598330] ? ion_dma_buf_release+0x40/0x40 [ 1509.598342] ? __might_fault+0x177/0x1b0 [ 1509.598355] ion_ioctl+0xea/0x1f0 [ 1509.603801] DMA32 free:17992kB min:36200kB low:45248kB high:54296kB active_anon:51056kB inactive_anon:26940kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6912kB pagetables:2124kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1509.608193] ? ion_query_heaps+0x360/0x360 [ 1509.608206] ? ion_query_heaps+0x360/0x360 [ 1509.608216] do_vfs_ioctl+0x75a/0xff0 [ 1509.608228] ? ioctl_preallocate+0x1a0/0x1a0 [ 1509.612627] lowmem_reserve[]: [ 1509.614696] ? lock_downgrade+0x740/0x740 [ 1509.619558] 0 [ 1509.623654] ? __fget+0x225/0x360 [ 1509.628601] 0 [ 1509.630619] ? do_vfs_ioctl+0xff0/0xff0 [ 1509.636036] 0 [ 1509.638197] ? security_file_ioctl+0x83/0xb0 [ 1509.638208] SyS_ioctl+0x7f/0xb0 [ 1509.638220] ? do_vfs_ioctl+0xff0/0xff0 [ 1509.643216] 0 [ 1509.648061] do_syscall_64+0x1d5/0x640 [ 1509.648079] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1509.648088] RIP: 0033:0x465f69 [ 1509.650304] 0 [ 1509.653835] RSP: 002b:00007f51b8dd6188 EFLAGS: 00000246 [ 1509.662292] ORIG_RAX: 0000000000000010 [ 1509.665754] Node 0 [ 1509.694003] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1509.694009] RDX: 0000000020000240 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1509.694014] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1509.694018] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1509.694023] R13: 00007ffd73bd643f R14: 00007f51b8dd6300 R15: 0000000000022000 [ 1509.700400] Mem-Info: [ 1509.715961] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.724136] active_anon:13202 inactive_anon:6737 isolated_anon:0 [ 1509.724136] active_file:21 inactive_file:0 isolated_file:0 [ 1509.724136] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1509.724136] slab_reclaimable:20084 slab_unreclaimable:108415 [ 1509.724136] mapped:28790 shmem:6924 pagetables:608 bounce:0 [ 1509.724136] free:13921 free_pcp:60 free_cma:0 [ 1509.726607] lowmem_reserve[]: [ 1509.729385] Node 0 active_anon:51056kB inactive_anon:26940kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115160kB dirty:0kB writeback:0kB shmem:27688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1509.733519] 0 [ 1509.735493] Node 1 active_anon:1752kB inactive_anon:8kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1509.745924] 0 [ 1509.754385] Node 0 [ 1509.765862] 0 [ 1509.774018] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.787132] 0 [ 1509.798447] lowmem_reserve[]: [ 1509.808694] 0 [ 1509.811404] 0 [ 1509.875905] 2717 [ 1509.912317] Node 1 [ 1509.930851] 2718 [ 1509.931161] Normal free:26716kB min:53696kB low:67120kB high:80544kB active_anon:1752kB inactive_anon:8kB active_file:172kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:308kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1509.932689] 2718 [ 1509.969941] lowmem_reserve[]: [ 1509.975177] 2718 [ 1510.010350] Node 0 DMA32 free:17992kB min:36200kB low:45248kB high:54296kB active_anon:51056kB inactive_anon:26940kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6912kB pagetables:2124kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1510.013870] 0 [ 1510.044801] lowmem_reserve[]: 0 0 0 0 0 [ 1510.050665] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1510.052447] 0 [ 1510.080542] lowmem_reserve[]: 0 0 0 0 0 [ 1510.086338] Node 1 Normal free:26716kB min:53696kB low:67120kB high:80544kB active_anon:1752kB inactive_anon:8kB active_file:24kB inactive_file:92kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:308kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1510.087380] 0 [ 1510.119670] lowmem_reserve[]: 0 0 0 0 0 [ 1510.125471] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 5*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 1510.126239] device bridge_slave_1 left promiscuous mode [ 1510.144679] Node 0 DMA32: 2452*4kB (MEH) 762*8kB (UMEH) 108*16kB (UME) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17632kB [ 1510.157131] 0 0 [ 1510.161340] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 5*16kB (U) 4*32kB (UE) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 1510.163322] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1510.188698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.191442] Node 1 Normal: 103*4kB (ME) 82*8kB (ME) 79*16kB (UME) 58*32kB (M) 42*64kB (ME) 23*128kB (UME) 14*256kB (UME) 10*512kB (UME) 8*1024kB (UME) 0*2048kB 0*4096kB = 26716kB [ 1510.209290] Node 0 [ 1510.222456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1510.229599] DMA32: 2452*4kB (MEH) 762*8kB (UMEH) [ 1510.233601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1510.244356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1510.256052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1510.256101] device bridge_slave_0 left promiscuous mode [ 1510.270483] 6955 total pagecache pages [ 1510.270493] 0 pages in swap cache [ 1510.270499] Swap cache stats: add 0, delete 0, find 0/0 [ 1510.270502] Free swap = 0kB [ 1510.270508] Total swap = 0kB [ 1510.283990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.292346] 2097051 pages RAM [ 1510.296029] 108*16kB [ 1510.299004] 0 pages HighMem/MovableOnly [ 1510.299007] 363840 pages reserved [ 1510.299011] 0 pages cma reserved [ 1510.334421] (UME) [ 1510.334467] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1510.344113] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17632kB [ 1510.377182] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1510.390139] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1510.429725] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 0*16kB 3*32kB (UME) 3*64kB (UME) 14*128kB (M) 13*256kB (ME) 10*512kB (UME) 145*1024kB (UME) 37*2048kB (U) 17*4096kB (U) = 304432kB [ 1510.475341] bond0 (unregistering): Released all slaves [ 1510.493147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1510.529944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1510.577386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1510.586343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1510.638149] 11173 total pagecache pages [ 1510.642167] 0 pages in swap cache [ 1510.645638] Swap cache stats: add 0, delete 0, find 0/0 [ 1510.698089] Free swap = 0kB [ 1510.701141] Total swap = 0kB [ 1510.704154] 2097051 pages RAM [ 1510.728084] 0 pages HighMem/MovableOnly [ 1510.732092] 363840 pages reserved [ 1510.735795] 0 pages cma reserved [ 1510.767902] Out of memory (oom_kill_allocating_task): Kill process 13233 (in:imklog) score 0 or sacrifice child [ 1510.808116] Killed process 13230 (rsyslogd) total-vm:254332kB, anon-rss:688kB, file-rss:0kB, shmem-rss:0kB [ 1510.856675] oom_reaper: reaped process 7975 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 03:05:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000003, 0x2f}) [ 1514.949443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1514.956273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1514.964235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1514.970984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1514.979349] device bridge_slave_1 left promiscuous mode [ 1514.984787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.992247] device bridge_slave_0 left promiscuous mode [ 1514.997862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.006382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1515.013778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.021762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1515.029167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.036746] device bridge_slave_1 left promiscuous mode [ 1515.042233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.050117] device bridge_slave_0 left promiscuous mode [ 1515.055634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.064665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1515.071516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.079491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1515.086178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.094343] device bridge_slave_1 left promiscuous mode [ 1515.100311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.107420] device bridge_slave_0 left promiscuous mode [ 1515.113030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.123934] device veth1_macvtap left promiscuous mode [ 1515.129346] device veth0_macvtap left promiscuous mode [ 1515.134646] device veth1_vlan left promiscuous mode [ 1515.139780] device veth0_vlan left promiscuous mode [ 1515.145046] device veth1_macvtap left promiscuous mode [ 1515.150410] device veth0_macvtap left promiscuous mode [ 1515.155711] device veth1_vlan left promiscuous mode [ 1515.161381] device veth0_vlan left promiscuous mode [ 1515.166970] device veth1_macvtap left promiscuous mode [ 1515.172250] device veth0_macvtap left promiscuous mode [ 1515.177671] device veth1_vlan left promiscuous mode [ 1515.182706] device veth0_vlan left promiscuous mode [ 1515.315117] device hsr_slave_1 left promiscuous mode [ 1515.323995] device hsr_slave_0 left promiscuous mode [ 1515.335399] team0 (unregistering): Port device team_slave_1 removed [ 1515.346149] team0 (unregistering): Port device team_slave_0 removed [ 1515.354888] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1515.366628] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1515.389556] bond0 (unregistering): Released all slaves [ 1515.421040] device hsr_slave_1 left promiscuous mode [ 1515.431734] device hsr_slave_0 left promiscuous mode [ 1515.443002] team0 (unregistering): Port device team_slave_1 removed [ 1515.453277] team0 (unregistering): Port device team_slave_0 removed [ 1515.462359] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1515.473522] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1515.496834] bond0 (unregistering): Released all slaves [ 1515.524288] device hsr_slave_1 left promiscuous mode [ 1515.534260] device hsr_slave_0 left promiscuous mode [ 1515.545684] team0 (unregistering): Port device team_slave_1 removed [ 1515.557274] team0 (unregistering): Port device team_slave_0 removed [ 1515.565854] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1515.578416] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1515.601975] bond0 (unregistering): Released all slaves [ 1516.264369] IPVS: ftp: loaded support on port[0] = 21 [ 1516.298226] IPVS: ftp: loaded support on port[0] = 21 [ 1516.372744] chnl_net:caif_netlink_parms(): no params data found [ 1516.459712] chnl_net:caif_netlink_parms(): no params data found [ 1516.641628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.648592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.655918] device bridge_slave_0 entered promiscuous mode [ 1516.671010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.677870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.685591] device bridge_slave_1 entered promiscuous mode [ 1516.705534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.712351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.719861] device bridge_slave_0 entered promiscuous mode [ 1516.734602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.741489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.748983] device bridge_slave_1 entered promiscuous mode [ 1516.756631] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1516.773853] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1516.789977] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1516.804424] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1516.824977] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1516.833533] team0: Port device team_slave_0 added [ 1516.838480] Bluetooth: hci1 command 0x0409 tx timeout [ 1516.846778] Bluetooth: hci0 command 0x0409 tx timeout [ 1516.853960] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1516.861567] team0: Port device team_slave_1 added [ 1516.874162] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1516.882136] team0: Port device team_slave_0 added [ 1516.889053] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1516.896770] team0: Port device team_slave_1 added [ 1516.914971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.921924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.947975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.966215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.972608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.999352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.011231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.018193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.044334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.055085] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1517.062745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1517.070732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.077570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.102950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.120392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1517.133177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1517.150851] device hsr_slave_0 entered promiscuous mode [ 1517.157251] device hsr_slave_1 entered promiscuous mode [ 1517.171030] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1517.178152] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1517.188091] device hsr_slave_0 entered promiscuous mode [ 1517.193716] device hsr_slave_1 entered promiscuous mode [ 1517.200145] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1517.212040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1517.353438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.360048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.366899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.373281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.384908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.391293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.398094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.404432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.451532] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1517.457852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.473164] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1517.480852] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1517.487515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.496019] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1517.502995] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1517.509839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.517083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.523675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.531997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.540381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1517.548814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1517.558352] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1517.564437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.573566] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1517.581174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1517.588533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1517.598354] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1517.604429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.614382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1517.622482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.628893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.636579] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1517.643607] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1517.653024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1517.663035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1517.670813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1517.678819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1517.686433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.692847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.699958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1517.709042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1517.716754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.723106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.732385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1517.742237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1517.749692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1517.758434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1517.765982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.772391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.779705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1517.789811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1517.800259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1517.807302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1517.814965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1517.825369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1517.833155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1517.843262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1517.851200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1517.859294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1517.871037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1517.878314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1517.885549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1517.894872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1517.902985] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1517.911375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1517.920469] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1517.928785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1517.937331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1517.944809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1517.953270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1517.963885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1517.972000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1517.980916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1517.990638] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1518.001292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1518.009060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1518.018461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1518.025820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1518.034641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1518.044179] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1518.050679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1518.060581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1518.070410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1518.078388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1518.088708] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1518.094702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1518.111719] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1518.119347] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1518.128550] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1518.135524] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1518.142664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1518.149862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1518.156847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1518.163559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1518.175801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1518.184286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1518.256278] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1518.270219] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1518.277586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1518.285442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1518.300376] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1518.313742] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1518.321773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1518.331161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1518.355237] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1518.362751] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1518.370935] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1518.381098] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1518.389540] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1518.397396] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1518.403913] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1518.411426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1518.419025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1518.426350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1518.433835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1518.445421] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1518.454162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1518.462464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1518.470659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1518.477978] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1518.485032] device veth0_vlan entered promiscuous mode [ 1518.493190] device veth0_vlan entered promiscuous mode [ 1518.503700] device veth1_vlan entered promiscuous mode [ 1518.510541] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1518.522380] device veth1_vlan entered promiscuous mode [ 1518.529414] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1518.538583] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1518.550387] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1518.559894] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1518.573099] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1518.581639] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1518.588637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1518.595780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1518.603927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1518.611218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1518.618752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1518.626597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1518.635333] device veth0_macvtap entered promiscuous mode [ 1518.645602] device veth1_macvtap entered promiscuous mode [ 1518.653526] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1518.663527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1518.671753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1518.682387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1518.692569] device veth0_macvtap entered promiscuous mode [ 1518.698648] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1518.708676] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1518.718597] device veth1_macvtap entered promiscuous mode [ 1518.724904] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1518.733407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1518.743254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.753462] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1518.760517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.769251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1518.776514] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1518.783516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1518.791353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1518.800159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1518.810051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.820216] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1518.827174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.835657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1518.844085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1518.853455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1518.868356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1518.880493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1518.891318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.901281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1518.911489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.921234] Bluetooth: hci1 command 0x041b tx timeout [ 1518.922803] Bluetooth: hci0 command 0x041b tx timeout [ 1518.928497] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1518.939399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.947464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1518.955206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1518.965896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1518.977316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.986810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1518.997797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.007944] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1519.014799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1519.026294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1519.034596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:05:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xc001, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000140)) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) 03:05:13 executing program 1 (fault-call:2 fault-nth:0): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:05:13 executing program 5 (fault-call:3 fault-nth:0): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:05:13 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1ac, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x30e}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x598}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x25a}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 03:05:13 executing program 3: ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x2}) 03:05:13 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x48000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:05:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x2f}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x0, 0x18}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x234, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x50}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x61}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x26d}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2c2}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcdae}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd97d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2731}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x28, 0x3, "c3c08a469b9184eccc2d829b851404692b28cbd70c7f77e4a7e19b003bdfd8eb01af6701"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "12b38dc32d7a25e5a753535a4cbb9c49fb11334b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf96}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffcd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x10000000}, 0x50) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0xfff, 0x26}) 03:05:13 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0x6, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000100)={0x3f, 0x0, 0x40, 0x0, 0x0, 0x0, 0x400}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:05:13 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x20, 0x70bd26, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x400, 0x0, 0x1, 0x1ff}, 0x0, &(0x7f0000000100)={0x3f, 0x0, 0xffffffff}, &(0x7f0000000140), 0x0) 03:05:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:05:13 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00', r1) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000026c0)='tasks\x00', 0x2, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x21c, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_NODE={0x1f4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xee}, @TIPC_NLA_NODE_ID={0x13, 0x3, "bfdbe2dc2d6f052efe3386b7caf85a"}, @TIPC_NLA_NODE_ID={0xce, 0x3, "a5ab44c1cbdedfb812ae3facadf7598beead7ff27710a60307395a9f8a67b18bcb4bd58e499684e1eea77e4b9d94814d0dc576a3907efd1d31076554234f51af6256f123b92d72243f23bcc865d928399b7ad372c47c0feee010c4384596e04bf0131e67e7d03502d45622109e3171bea03e15121f825b1e82160d50b7f7c9b65e2ef9e7fd4c6f14a33badad2ca5880ca2eceed617f9a1bc7822f45140f559a35d709ff0c3fe8f806fc2bbcf7512dd20a5529383e138e2594894c512e2a05d43f3784243020c6b1b44e2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0xa3, 0x3, "57b7adffd04c517917338bc90c8b15d2fc881769d3c169860390cc88a6e80e1ac17c6fa9a7dd0e106efb9cb226b749fbd6986028ca6b49554e9fbc2fd40413b286b6ea83aae59fb24ddefda34e4b294d311b8c942d66330bc49b070033679e86046835b2a39b6642bf9bf8c49625e5c7ca2ca26a4a5d49fa88bcdf5ba053790390dd31bc51d89c6f5ed19a2e389d38abf1e8dfc08755cd22ced1d54830b6fa"}, @TIPC_NLA_NODE_ID={0xc, 0x3, "c62a1d14ceffeded"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "b08b04d8b62db50951bf13de76ee2c3827a9040049bdf1c5b618b7e93354dd6d"}}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a8, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "262cdef4d282c4ae11b90ad4ae76917fd296befb05"}}, @TIPC_NLA_NODE_ID={0xbc, 0x3, "b8ff52005a8c9115865fe1194945f75dfa298398a7d0b8ce296251e26ab00aa46cf8e113af85f1986aae561491f3593d39f7048e460c687bc9a280cdc0addb9280c88e6f830a70f6e40d456fd2ea202e35c5df96c62548dad5dab03eecde383e11ea3c57c2bb741e3437e3450723a551e708907e0c8c8e98702d3dfc39af6d558689da21fa3f8a0007c4597b09b84c725a3703867009491b32bc78c540ec88df6a2a77b5613f5da356ed4da58a1fe09ebbef272e18ba3cad"}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff753}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5bc8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0xc000}, 0xc0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f00000008c0), 0x4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x168, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x77000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f237a9c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x76038c53}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6042}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 03:05:14 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3f}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000040)={0x6, 0x20, 0x101, 0x20, 0x5}, 0x48) 03:05:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80000003, 0x2f}) [ 1520.643146] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1520.672645] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1520.694830] CPU: 0 PID: 13761 Comm: syz-executor.3 Not tainted 4.14.226-syzkaller #0 [ 1520.702760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.712133] Call Trace: [ 1520.714742] dump_stack+0x1b2/0x281 [ 1520.718375] warn_alloc.cold+0x96/0x1cc [ 1520.722636] ? zone_watermark_ok_safe+0x220/0x220 [ 1520.727489] __alloc_pages_nodemask+0x2127/0x2720 [ 1520.732326] ? __schedule+0x893/0x1de0 [ 1520.736304] ? lock_acquire+0x170/0x3f0 [ 1520.740278] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1520.745124] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1520.750673] ? __mutex_unlock_slowpath+0x75/0x770 [ 1520.755519] alloc_pages_current+0x155/0x260 [ 1520.759929] ion_page_pool_alloc+0x118/0x1b0 [ 1520.764331] ion_system_heap_allocate+0x133/0x8c0 [ 1520.769163] ? ion_alloc+0x187/0x810 [ 1520.772868] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1520.778317] ? ion_system_contig_heap_create+0x130/0x130 [ 1520.783777] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1520.788817] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1520.793676] ion_alloc+0x204/0x810 [ 1520.797212] ? ion_dma_buf_release+0x40/0x40 [ 1520.801630] ? __might_fault+0x177/0x1b0 [ 1520.805701] ion_ioctl+0xea/0x1f0 [ 1520.809164] ? ion_query_heaps+0x360/0x360 [ 1520.813405] ? ion_query_heaps+0x360/0x360 [ 1520.817631] do_vfs_ioctl+0x75a/0xff0 [ 1520.821421] ? ioctl_preallocate+0x1a0/0x1a0 [ 1520.825828] ? lock_downgrade+0x740/0x740 [ 1520.829977] ? __fget+0x225/0x360 [ 1520.833427] ? do_vfs_ioctl+0xff0/0xff0 [ 1520.837394] ? security_file_ioctl+0x83/0xb0 [ 1520.841794] SyS_ioctl+0x7f/0xb0 [ 1520.845148] ? do_vfs_ioctl+0xff0/0xff0 [ 1520.849113] do_syscall_64+0x1d5/0x640 [ 1520.853005] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1520.858184] RIP: 0033:0x465f69 [ 1520.861373] RSP: 002b:00007f09f39ce188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1520.869086] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1520.876348] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1520.883631] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1520.890913] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1520.898173] R13: 00007ffd9007748f R14: 00007f09f39ce300 R15: 0000000000022000 [ 1520.936692] Mem-Info: [ 1520.939226] active_anon:13053 inactive_anon:6732 isolated_anon:0 [ 1520.939226] active_file:2703 inactive_file:2974 isolated_file:44 [ 1520.939226] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1520.939226] slab_reclaimable:17441 slab_unreclaimable:109860 [ 1520.939226] mapped:59588 shmem:6919 pagetables:704 bounce:0 [ 1520.939226] free:71183 free_pcp:194 free_cma:0 [ 1520.980411] Node 0 active_anon:51840kB inactive_anon:26928kB active_file:7144kB inactive_file:9096kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:207452kB dirty:36kB writeback:0kB shmem:27676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1521.009016] Bluetooth: hci0 command 0x040f tx timeout [ 1521.011537] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1521.018758] Bluetooth: hci1 command 0x040f tx timeout [ 1521.035272] Node 1 active_anon:372kB inactive_anon:0kB active_file:788kB inactive_file:644kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:26252kB dirty:8kB writeback:4kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1521.063107] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1521.069458] CPU: 0 PID: 13774 Comm: syz-executor.2 Not tainted 4.14.226-syzkaller #0 [ 1521.077349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1521.086698] Call Trace: [ 1521.089292] dump_stack+0x1b2/0x281 [ 1521.092912] warn_alloc.cold+0x96/0x1cc [ 1521.096879] ? zone_watermark_ok_safe+0x220/0x220 [ 1521.101726] __alloc_pages_nodemask+0x2127/0x2720 [ 1521.106569] ? lock_acquire+0x170/0x3f0 [ 1521.110539] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1521.115379] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1521.120822] ? __mutex_unlock_slowpath+0x75/0x770 [ 1521.125663] alloc_pages_current+0x155/0x260 [ 1521.130070] ion_page_pool_alloc+0x118/0x1b0 [ 1521.134473] ion_system_heap_allocate+0x133/0x8c0 [ 1521.139306] ? ion_alloc+0x187/0x810 [ 1521.143009] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1521.148481] ? ion_system_contig_heap_create+0x130/0x130 [ 1521.154111] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1521.159140] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1521.163978] ion_alloc+0x204/0x810 [ 1521.167510] ? ion_dma_buf_release+0x40/0x40 [ 1521.171929] ? __might_fault+0x177/0x1b0 [ 1521.175996] ion_ioctl+0xea/0x1f0 [ 1521.179441] ? ion_query_heaps+0x360/0x360 [ 1521.183670] ? ion_query_heaps+0x360/0x360 [ 1521.187911] do_vfs_ioctl+0x75a/0xff0 [ 1521.191743] ? ioctl_preallocate+0x1a0/0x1a0 [ 1521.196147] ? lock_downgrade+0x740/0x740 [ 1521.200297] ? __fget+0x225/0x360 [ 1521.203741] ? do_vfs_ioctl+0xff0/0xff0 [ 1521.207705] ? security_file_ioctl+0x83/0xb0 [ 1521.212103] SyS_ioctl+0x7f/0xb0 [ 1521.215465] ? do_vfs_ioctl+0xff0/0xff0 [ 1521.219436] do_syscall_64+0x1d5/0x640 [ 1521.223322] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1521.228505] RIP: 0033:0x465f69 [ 1521.231681] RSP: 002b:00007ff8ba015188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1521.239387] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1521.246649] RDX: 0000000020000240 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1521.254968] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1521.262229] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1521.269491] R13: 00007ffef483301f R14: 00007ff8ba015300 R15: 0000000000022000 [ 1521.276832] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1521.312787] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1521.319372] Node 0 DMA32 free:173388kB min:36200kB low:45248kB high:54296kB active_anon:51956kB inactive_anon:26928kB active_file:7232kB inactive_file:9240kB unevictable:0kB writepending:48kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2872kB bounce:0kB free_pcp:736kB local_pcp:500kB free_cma:0kB [ 1521.351176] lowmem_reserve[]: 0 0 0 0 0 [ 1521.355201] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1521.383171] lowmem_reserve[]: 0 0 0 0 0 [ 1521.387469] Node 1 Normal free:79660kB min:53696kB low:67120kB high:80544kB active_anon:372kB inactive_anon:0kB active_file:720kB inactive_file:896kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:72kB bounce:0kB free_pcp:324kB local_pcp:324kB free_cma:0kB [ 1521.420230] lowmem_reserve[]: 0 0 0 0 0 [ 1521.424258] Node 0 DMA: 2*4kB (UE) 8*8kB (U) 5*16kB (UE) 8*32kB (UE) 1*64kB (E) 3*128kB (UE) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11096kB [ 1521.443008] Node 0 DMA32: 3078*4kB (UEH) 1271*8kB (EH) 260*16kB (EH) 1157*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 63664kB [ 1521.459781] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1521.471340] Node 1 Normal: 3*4kB (M) 852*8kB (UM) 1477*16kB (UM) 1305*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 72220kB [ 1521.506699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.515552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1521.576544] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.585459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1521.615611] 7479 total pagecache pages [ 1521.619846] 0 pages in swap cache [ 1521.623297] Swap cache stats: add 0, delete 0, find 0/0 [ 1521.628801] Free swap = 0kB [ 1521.631819] Total swap = 0kB [ 1521.634891] 2097051 pages RAM [ 1521.639066] 0 pages HighMem/MovableOnly [ 1521.643810] 363840 pages reserved [ 1521.647337] 0 pages cma reserved [ 1521.856171] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1521.883872] systemd-journal cpuset=/ mems_allowed=0-1 [ 1521.931395] CPU: 1 PID: 4620 Comm: systemd-journal Not tainted 4.14.226-syzkaller #0 [ 1521.939294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1521.948645] Call Trace: [ 1521.951257] dump_stack+0x1b2/0x281 [ 1521.954890] dump_header+0x178/0x82f [ 1521.958621] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1521.963732] ? ___ratelimit+0x2cd/0x530 [ 1521.967707] oom_kill_process.cold+0x10/0xb18 [ 1521.972214] out_of_memory+0xe3e/0x1190 [ 1521.976185] ? oom_killer_disable+0x1c0/0x1c0 [ 1521.980677] ? mutex_trylock+0x152/0x1a0 [ 1521.984742] __alloc_pages_nodemask+0x23e1/0x2720 [ 1521.989596] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1521.994478] alloc_pages_current+0x155/0x260 [ 1521.998887] filemap_fault+0xea3/0x1980 [ 1522.002877] ext4_filemap_fault+0x84/0xb0 [ 1522.007027] __do_fault+0xfa/0x380 [ 1522.010561] __handle_mm_fault+0x2497/0x4620 [ 1522.014970] ? ep_poll+0x1ab/0xa50 [ 1522.018528] ? vm_insert_page+0x7c0/0x7c0 [ 1522.022684] handle_mm_fault+0x391/0x860 [ 1522.026768] __do_page_fault+0x549/0xad0 [ 1522.030825] ? spurious_fault+0x640/0x640 [ 1522.034969] ? do_page_fault+0x60/0x500 [ 1522.038945] ? page_fault+0x2f/0x50 [ 1522.042565] page_fault+0x45/0x50 [ 1522.046011] RIP: 0001:0x1 [ 1522.048760] RSP: a87cb310:00007ffedf124300 EFLAGS: 7ffedf124110 [ 1522.060745] Mem-Info: [ 1522.069778] active_anon:13288 inactive_anon:6732 isolated_anon:0 [ 1522.069778] active_file:22 inactive_file:32 isolated_file:5 [ 1522.069778] unevictable:0 dirty:3 writeback:18 unstable:0 [ 1522.069778] slab_reclaimable:17322 slab_unreclaimable:110035 [ 1522.069778] mapped:55030 shmem:6919 pagetables:736 bounce:0 [ 1522.069778] free:25227 free_pcp:119 free_cma:0 [ 1522.106366] Node 0 active_anon:52780kB inactive_anon:26928kB active_file:72kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:195368kB dirty:8kB writeback:60kB shmem:27676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1522.136825] Node 1 active_anon:372kB inactive_anon:0kB active_file:16kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:24752kB dirty:4kB writeback:12kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1522.165712] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1522.195673] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1522.200784] Node 0 DMA32 free:36096kB min:36200kB low:45248kB high:54296kB active_anon:52780kB inactive_anon:26928kB active_file:28kB inactive_file:152kB unevictable:0kB writepending:68kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2872kB bounce:0kB free_pcp:188kB local_pcp:0kB free_cma:0kB [ 1522.232398] lowmem_reserve[]: 0 0 0 0 0 [ 1522.236453] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1522.264048] lowmem_reserve[]: 0 0 0 0 0 [ 1522.268120] Node 1 Normal free:53616kB min:53696kB low:67120kB high:80544kB active_anon:372kB inactive_anon:0kB active_file:12kB inactive_file:148kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1522.298874] lowmem_reserve[]: 0 0 0 0 0 [ 1522.302900] Node 0 DMA: 1*4kB (E) 5*8kB (U) 5*16kB (UE) 8*32kB (UE) 1*64kB (E) 3*128kB (UE) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11068kB [ 1522.322120] Node 0 DMA32: 3571*4kB (UME) 1707*8kB (UME) 348*16kB (UME) 67*32kB (UME) 8*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36164kB [ 1522.338652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1522.349673] Node 1 Normal: 77*4kB (UM) 39*8kB (UM) 711*16kB (UM) 1303*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53884kB [ 1522.369207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1522.378174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1522.388616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1522.397556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1522.406231] 6997 total pagecache pages [ 1522.412185] 0 pages in swap cache [ 1522.415642] Swap cache stats: add 0, delete 0, find 0/0 [ 1522.421318] Free swap = 0kB [ 1522.424417] Total swap = 0kB [ 1522.429292] 2097051 pages RAM [ 1522.432411] 0 pages HighMem/MovableOnly [ 1522.436373] 363840 pages reserved [ 1522.443597] 0 pages cma reserved [ 1522.449660] Out of memory (oom_kill_allocating_task): Kill process 4620 (systemd-journal) score 0 or sacrifice child [ 1522.460520] Killed process 4620 (systemd-journal) total-vm:54288kB, anon-rss:508kB, file-rss:0kB, shmem-rss:14000kB [ 1522.474349] oom_reaper: reaped process 4620 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:14096kB [ 1522.704383] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1522.867542] systemd cpuset=/ mems_allowed=0-1 [ 1522.872083] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.226-syzkaller #0 [ 1522.878998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1522.888349] Call Trace: [ 1522.890943] dump_stack+0x1b2/0x281 [ 1522.894570] dump_header+0x178/0x82f [ 1522.898284] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1522.903396] ? ___ratelimit+0x2cd/0x530 [ 1522.907367] oom_kill_process.cold+0x10/0xb18 [ 1522.911881] ? lock_downgrade+0x740/0x740 [ 1522.916030] out_of_memory+0x2dc/0x1190 [ 1522.920005] ? oom_killer_disable+0x1c0/0x1c0 [ 1522.924492] ? mutex_trylock+0x152/0x1a0 [ 1522.928553] __alloc_pages_nodemask+0x23e1/0x2720 [ 1522.933404] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1522.938261] alloc_pages_current+0x155/0x260 [ 1522.942666] filemap_fault+0xea3/0x1980 [ 1522.946646] ext4_filemap_fault+0x84/0xb0 [ 1522.950794] __do_fault+0xfa/0x380 [ 1522.954330] __handle_mm_fault+0x2497/0x4620 [ 1522.958743] ? ep_poll+0x1ab/0xa50 [ 1522.962382] ? vm_insert_page+0x7c0/0x7c0 [ 1522.966547] handle_mm_fault+0x391/0x860 [ 1522.970607] __do_page_fault+0x549/0xad0 [ 1522.974665] ? spurious_fault+0x640/0x640 [ 1522.978829] ? do_page_fault+0x60/0x500 [ 1522.982803] ? page_fault+0x2f/0x50 [ 1522.986418] page_fault+0x45/0x50 [ 1522.989869] RIP: 0001:0x1 [ 1522.992630] RSP: 812db080:00007fffe54e7fb0 EFLAGS: 7fffe54e7cf0 [ 1523.076609] Bluetooth: hci1 command 0x0419 tx timeout [ 1523.157183] Bluetooth: hci0 command 0x0419 tx timeout [ 1523.936462] Mem-Info: [ 1523.938927] active_anon:13912 inactive_anon:5981 isolated_anon:0 [ 1523.938927] active_file:0 inactive_file:0 isolated_file:0 [ 1523.938927] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1523.938927] slab_reclaimable:17286 slab_unreclaimable:109819 [ 1523.938927] mapped:52233 shmem:6919 pagetables:705 bounce:0 [ 1523.938927] free:25016 free_pcp:24 free_cma:0 [ 1524.039281] Node 0 active_anon:55276kB inactive_anon:23924kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184184kB dirty:0kB writeback:0kB shmem:27676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1524.072978] Node 1 active_anon:372kB inactive_anon:0kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):52kB mapped:24716kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1524.101529] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.131506] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1524.136639] Node 0 DMA32 free:36276kB min:36200kB low:45248kB high:54296kB active_anon:55276kB inactive_anon:23924kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2748kB bounce:0kB free_pcp:544kB local_pcp:204kB free_cma:0kB [ 1524.169234] lowmem_reserve[]: 0 0 0 0 0 [ 1524.173244] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.201699] lowmem_reserve[]: 0 0 0 0 0 [ 1524.205718] Node 1 Normal free:53180kB min:53696kB low:67120kB high:80544kB active_anon:372kB inactive_anon:0kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:72kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1524.235981] lowmem_reserve[]: 0 0 0 0 0 [ 1524.240062] Node 0 DMA: 1*4kB (E) 5*8kB (U) 5*16kB (UE) 8*32kB (UE) 1*64kB (E) 3*128kB (UE) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11068kB [ 1524.257055] Node 0 DMA32: 3770*4kB (ME) 1626*8kB (ME) 351*16kB (ME) 67*32kB (UME) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35976kB [ 1524.272465] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1524.284507] Node 1 Normal: 8*4kB (M) 4*8kB (M) 711*16kB (UM) 1299*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53200kB [ 1524.301403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1524.326484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1524.335138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1524.346082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1524.354703] 6954 total pagecache pages [ 1524.361020] 0 pages in swap cache [ 1524.364598] Swap cache stats: add 0, delete 0, find 0/0 [ 1524.370020] Free swap = 0kB [ 1524.373059] Total swap = 0kB [ 1524.376074] 2097051 pages RAM [ 1524.381212] 0 pages HighMem/MovableOnly [ 1524.385187] 363840 pages reserved [ 1524.388764] 0 pages cma reserved [ 1524.392127] Out of memory: Kill process 13756 (syz-executor.3) score 1005 or sacrifice child [ 1524.402802] Killed process 13761 (syz-executor.3) total-vm:93780kB, anon-rss:2212kB, file-rss:34820kB, shmem-rss:0kB [ 1524.470868] oom_reaper: reaped process 13761 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1524.495261] kworker/u4:3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1524.563311] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 1524.568586] CPU: 1 PID: 5626 Comm: kworker/u4:3 Not tainted 4.14.226-syzkaller #0 [ 1524.576203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1524.585567] Workqueue: events_unbound call_usermodehelper_exec_work [ 1524.591969] Call Trace: [ 1524.594558] dump_stack+0x1b2/0x281 [ 1524.598189] dump_header+0x178/0x82f [ 1524.601900] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1524.606997] ? ___ratelimit+0x2cd/0x530 [ 1524.610972] oom_kill_process.cold+0x10/0xb18 [ 1524.615463] ? lock_downgrade+0x740/0x740 [ 1524.619643] out_of_memory+0x2dc/0x1190 [ 1524.623617] ? oom_killer_disable+0x1c0/0x1c0 [ 1524.628106] ? mutex_trylock+0x152/0x1a0 [ 1524.632204] __alloc_pages_nodemask+0x23e1/0x2720 [ 1524.637056] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1524.641889] ? fs_reclaim_release+0xd0/0x110 [ 1524.646302] ? kmem_cache_alloc_node+0x38b/0x410 [ 1524.651128] copy_process.part.0+0x265/0x71c0 [ 1524.655625] ? __lock_acquire+0x5fc/0x3f20 [ 1524.659862] ? debug_object_activate+0x292/0x490 [ 1524.664613] ? trace_hardirqs_on+0x10/0x10 [ 1524.668843] ? static_obj+0x50/0x50 [ 1524.672472] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1524.677918] ? __cleanup_sighand+0x40/0x40 [ 1524.682172] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1524.687622] _do_fork+0x184/0xc80 [ 1524.691073] ? fork_idle+0x270/0x270 [ 1524.694786] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1524.699889] ? process_one_work+0x6c4/0x14a0 [ 1524.704319] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1524.709768] kernel_thread+0x2f/0x40 [ 1524.713484] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1524.718767] ? call_usermodehelper+0x80/0x80 [ 1524.723169] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1524.728621] process_one_work+0x793/0x14a0 [ 1524.732859] ? work_busy+0x320/0x320 [ 1524.736573] ? worker_thread+0x158/0xff0 [ 1524.740662] ? _raw_spin_unlock_irq+0x24/0x80 [ 1524.745158] worker_thread+0x5cc/0xff0 [ 1524.749057] ? rescuer_thread+0xc80/0xc80 [ 1524.753233] kthread+0x30d/0x420 [ 1524.756594] ? kthread_create_on_node+0xd0/0xd0 [ 1524.761273] ret_from_fork+0x24/0x30 [ 1524.773999] Mem-Info: [ 1524.778567] active_anon:13381 inactive_anon:5981 isolated_anon:0 [ 1524.778567] active_file:15 inactive_file:13 isolated_file:0 [ 1524.778567] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1524.778567] slab_reclaimable:17280 slab_unreclaimable:109678 [ 1524.778567] mapped:52226 shmem:6919 pagetables:705 bounce:0 [ 1524.778567] free:19167 free_pcp:33 free_cma:0 [ 1524.840965] Node 0 active_anon:53152kB inactive_anon:23924kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184184kB dirty:0kB writeback:0kB shmem:27676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1524.883409] Node 1 active_anon:372kB inactive_anon:0kB active_file:144kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24720kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1524.925760] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.970998] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1524.976061] Node 0 DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:53152kB inactive_anon:23924kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2748kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1524.976532] syz-executor.3: [ 1525.020786] lowmem_reserve[]: 0 0 0 0 0 [ 1525.037087] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1525.044374] Node 0 [ 1525.060972] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1525.064556] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1525.076356] CPU: 0 PID: 13761 Comm: syz-executor.3 Not tainted 4.14.226-syzkaller #0 [ 1525.101315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1525.101346] lowmem_reserve[]: [ 1525.110663] Call Trace: [ 1525.110684] dump_stack+0x1b2/0x281 [ 1525.110705] warn_alloc.cold+0x96/0x1cc [ 1525.113808] 0 [ 1525.116382] ? zone_watermark_ok_safe+0x220/0x220 [ 1525.120002] 0 [ 1525.123944] ? usleep_range+0x130/0x130 [ 1525.125717] 0 [ 1525.130547] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1525.130560] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1525.130571] ? run_timer_softirq+0x5a0/0x5a0 [ 1525.130588] __alloc_pages_nodemask+0x2127/0x2720 [ 1525.132398] 0 [ 1525.136454] ? lock_acquire+0x170/0x3f0 [ 1525.136471] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1525.138275] 0 [ 1525.143458] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1525.153148] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1525.157987] Node 1 [ 1525.159761] alloc_pages_current+0x155/0x260 [ 1525.163730] Normal free:26540kB min:53696kB low:67120kB high:80544kB active_anon:372kB inactive_anon:0kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:72kB bounce:0kB free_pcp:128kB local_pcp:8kB free_cma:0kB [ 1525.168552] ion_page_pool_alloc+0x118/0x1b0 [ 1525.168563] ion_system_heap_allocate+0x133/0x8c0 [ 1525.168577] ? ion_alloc+0x187/0x810 [ 1525.170356] lowmem_reserve[]: [ 1525.175206] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1525.180685] 0 [ 1525.182875] ? ion_system_contig_heap_create+0x130/0x130 [ 1525.187390] 0 [ 1525.215221] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1525.215235] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1525.215249] ion_alloc+0x204/0x810 [ 1525.215263] ? ion_dma_buf_release+0x40/0x40 [ 1525.219711] 0 [ 1525.225060] ? __might_fault+0x177/0x1b0 [ 1525.228791] 0 [ 1525.231878] ion_ioctl+0xea/0x1f0 [ 1525.237317] 0 [ 1525.239176] ? ion_query_heaps+0x360/0x360 [ 1525.245035] Node 0 [ 1525.246829] ? ion_query_heaps+0x360/0x360 [ 1525.246840] do_vfs_ioctl+0x75a/0xff0 [ 1525.246853] ? ioctl_preallocate+0x1a0/0x1a0 [ 1525.251869] DMA: [ 1525.256723] ? lock_downgrade+0x740/0x740 [ 1525.256737] ? __fget+0x225/0x360 [ 1525.256746] ? do_vfs_ioctl+0xff0/0xff0 [ 1525.256759] ? security_file_ioctl+0x83/0xb0 [ 1525.260288] 2*4kB [ 1525.264681] SyS_ioctl+0x7f/0xb0 [ 1525.266489] (UE) [ 1525.270508] ? do_vfs_ioctl+0xff0/0xff0 [ 1525.272284] 0*8kB [ 1525.275727] do_syscall_64+0x1d5/0x640 [ 1525.277536] 1*16kB [ 1525.281732] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1525.283938] (E) [ 1525.288168] RIP: 0033:0x465f69 [ 1525.288173] RSP: 002b:00007f09f39ce188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1525.288181] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1525.288186] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1525.288190] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1525.288195] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1525.288200] R13: 00007ffd9007748f R14: 00007f09f39ce300 R15: 0000000000022000 [ 1525.298378] warn_alloc_show_mem: 1 callbacks suppressed [ 1525.298381] Mem-Info: [ 1525.315510] 8*32kB [ 1525.326543] active_anon:13372 inactive_anon:5981 isolated_anon:0 [ 1525.326543] active_file:24 inactive_file:10 isolated_file:0 [ 1525.326543] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1525.326543] slab_reclaimable:17260 slab_unreclaimable:109681 [ 1525.326543] mapped:52225 shmem:6919 pagetables:704 bounce:0 [ 1525.326543] free:13900 free_pcp:77 free_cma:0 [ 1525.343881] (UE) [ 1525.353973] Node 0 active_anon:53116kB inactive_anon:23924kB active_file:28kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184184kB dirty:0kB writeback:0kB shmem:27676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1525.375507] 1*64kB [ 1525.391306] Node 1 active_anon:372kB inactive_anon:0kB active_file:68kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24716kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1525.411226] (E) [ 1525.443011] Node 0 [ 1525.479173] 3*128kB [ 1525.502960] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1525.516493] (UE) [ 1525.543990] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1525.549833] 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10968kB [ 1525.554107] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:53116kB inactive_anon:23924kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2744kB bounce:0kB free_pcp:172kB local_pcp:0kB free_cma:0kB [ 1525.576364] Node 0 [ 1525.610337] lowmem_reserve[]: 0 0 0 0 0 [ 1525.616513] DMA32: 2037*4kB (ME) 835*8kB (UME) 173*16kB (UME) 16*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18108kB [ 1525.622543] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1525.645516] Node 0 [ 1525.670184] lowmem_reserve[]: 0 0 0 0 0 [ 1525.675997] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1525.682872] Node 1 Normal free:26540kB min:53696kB low:67120kB high:80544kB active_anon:372kB inactive_anon:0kB active_file:52kB inactive_file:84kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:72kB bounce:0kB free_pcp:128kB local_pcp:120kB free_cma:0kB [ 1525.709822] Node 1 [ 1525.743183] lowmem_reserve[]: 0 0 0 0 0 [ 1525.749488] Normal: 9*4kB (UM) 5*8kB (UM) 4*16kB (M) 819*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26540kB [ 1525.751505] Node 0 DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 8*32kB (UE) 1*64kB (E) 3*128kB (UE) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10968kB [ 1525.778837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1525.797571] Node 0 DMA32: 2037*4kB (ME) 835*8kB (UME) 173*16kB (UME) 16*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18108kB [ 1525.814562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1525.821400] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1525.833052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1525.843910] Node 1 Normal: 9*4kB (UM) 5*8kB (UM) 4*16kB (M) 819*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26540kB [ 1525.858561] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1525.867391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1525.876245] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1525.880812] 6954 total pagecache pages [ 1525.895667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1525.905382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1525.906204] 0 pages in swap cache [ 1525.924871] 6954 total pagecache pages [ 1525.928845] 0 pages in swap cache [ 1525.932414] Swap cache stats: add 0, delete 0, find 0/0 [ 1525.934094] Swap cache stats: add 0, delete 0, find 0/0 [ 1525.952188] Free swap = 0kB [ 1525.955575] Free swap = 0kB [ 1525.975936] Total swap = 0kB [ 1525.976839] Total swap = 0kB [ 1525.982220] 2097051 pages RAM [ 1525.983105] 2097051 pages RAM [ 1525.985320] 0 pages HighMem/MovableOnly [ 1526.002919] 0 pages HighMem/MovableOnly [ 1526.005174] 363840 pages reserved [ 1526.012684] 0 pages cma reserved [ 1526.013118] 363840 pages reserved [ 1526.016057] Out of memory: Kill process 13772 (syz-executor.2) score 1004 or sacrifice child [ 1526.041401] Killed process 13774 (syz-executor.2) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1526.045281] 0 pages cma reserved [ 1526.061095] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1526.079236] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1526.096613] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1526.101768] CPU: 0 PID: 13774 Comm: syz-executor.2 Not tainted 4.14.226-syzkaller #0 [ 1526.109772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1526.119144] Call Trace: [ 1526.121750] dump_stack+0x1b2/0x281 [ 1526.125412] warn_alloc.cold+0x96/0x1cc [ 1526.129427] ? zone_watermark_ok_safe+0x220/0x220 [ 1526.134275] ? usleep_range+0x130/0x130 [ 1526.138268] ? try_to_free_pages+0x23f/0x6e0 [ 1526.142680] ? _find_next_bit+0xdb/0x100 [ 1526.146751] ? run_timer_softirq+0x5a0/0x5a0 [ 1526.151174] __alloc_pages_nodemask+0x2127/0x2720 [ 1526.156255] ? lock_acquire+0x170/0x3f0 [ 1526.160246] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1526.165114] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1526.169607] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1526.175051] ? check_preemption_disabled+0x35/0x240 [ 1526.180077] alloc_pages_current+0x155/0x260 [ 1526.184486] ion_page_pool_alloc+0x118/0x1b0 [ 1526.189110] ion_system_heap_allocate+0x133/0x8c0 [ 1526.193948] ? ion_alloc+0x187/0x810 [ 1526.197678] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1526.203135] ? ion_system_contig_heap_create+0x130/0x130 [ 1526.208599] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1526.213617] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1526.218460] ion_alloc+0x204/0x810 [ 1526.222031] ? ion_dma_buf_release+0x40/0x40 [ 1526.226454] ? __might_fault+0x177/0x1b0 [ 1526.230514] ion_ioctl+0xea/0x1f0 [ 1526.233997] ? ion_query_heaps+0x360/0x360 [ 1526.238314] ? ion_query_heaps+0x360/0x360 [ 1526.242543] do_vfs_ioctl+0x75a/0xff0 [ 1526.246342] ? ioctl_preallocate+0x1a0/0x1a0 [ 1526.250740] ? lock_downgrade+0x740/0x740 [ 1526.254898] ? __fget+0x225/0x360 [ 1526.258343] ? do_vfs_ioctl+0xff0/0xff0 [ 1526.264323] ? security_file_ioctl+0x83/0xb0 [ 1526.268741] SyS_ioctl+0x7f/0xb0 [ 1526.272095] ? do_vfs_ioctl+0xff0/0xff0 [ 1526.276062] do_syscall_64+0x1d5/0x640 [ 1526.279955] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1526.285146] RIP: 0033:0x465f69 [ 1526.288350] RSP: 002b:00007ff8ba015188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1526.296089] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1526.303360] RDX: 0000000020000240 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1526.310642] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1526.317910] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1526.325316] R13: 00007ffef483301f R14: 00007ff8ba015300 R15: 0000000000022000 [ 1526.353885] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1526.372929] CPU: 1 PID: 13789 Comm: syz-executor.5 Not tainted 4.14.226-syzkaller #0 [ 1526.381798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1526.391185] Call Trace: [ 1526.393877] dump_stack+0x1b2/0x281 [ 1526.397515] dump_header+0x178/0x82f [ 1526.401225] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1526.406695] ? ___ratelimit+0x2cd/0x530 [ 1526.410667] oom_kill_process.cold+0x10/0xb18 [ 1526.415706] out_of_memory+0xe3e/0x1190 [ 1526.421420] ? oom_killer_disable+0x1c0/0x1c0 [ 1526.426303] ? mutex_trylock+0x152/0x1a0 [ 1526.430371] __alloc_pages_nodemask+0x23e1/0x2720 [ 1526.435313] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1526.440789] alloc_pages_current+0x155/0x260 [ 1526.445204] filemap_fault+0xea3/0x1980 [ 1526.449194] ext4_filemap_fault+0x84/0xb0 [ 1526.453345] __do_fault+0xfa/0x380 [ 1526.456885] __handle_mm_fault+0x2497/0x4620 [ 1526.461384] ? vm_insert_page+0x7c0/0x7c0 [ 1526.465532] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1526.470581] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1526.475360] handle_mm_fault+0x391/0x860 [ 1526.479429] __do_page_fault+0x549/0xad0 [ 1526.483518] ? spurious_fault+0x640/0x640 [ 1526.487665] ? do_page_fault+0x60/0x500 [ 1526.491638] ? page_fault+0x2f/0x50 [ 1526.495262] page_fault+0x45/0x50 [ 1526.498707] RIP: 6ab7600f:0x7f25dcd52300 [ 1526.502762] RSP: dcd52700:0000000000000000 EFLAGS: 7fff6ab7600e [ 1526.524349] Mem-Info: [ 1526.538406] active_anon:13422 inactive_anon:5981 isolated_anon:0 [ 1526.538406] active_file:312 inactive_file:571 isolated_file:27 [ 1526.538406] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1526.538406] slab_reclaimable:17199 slab_unreclaimable:109289 [ 1526.538406] mapped:52850 shmem:6919 pagetables:704 bounce:0 [ 1526.538406] free:25483 free_pcp:432 free_cma:0 [ 1526.574763] Node 0 active_anon:53316kB inactive_anon:23924kB active_file:1392kB inactive_file:1312kB unevictable:0kB isolated(anon):0kB isolated(file):40kB mapped:185984kB dirty:0kB writeback:0kB shmem:27676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1526.577072] IPVS: ftp: loaded support on port[0] = 21 [ 1526.604550] Node 1 active_anon:372kB inactive_anon:0kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24916kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1526.604557] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1526.604577] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1526.604596] Node 0 DMA32 free:37020kB min:36200kB low:45248kB high:54296kB active_anon:53216kB inactive_anon:23924kB active_file:1364kB inactive_file:1600kB unevictable:0kB writepending:148kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2744kB bounce:0kB free_pcp:224kB local_pcp:0kB free_cma:0kB [ 1526.604614] lowmem_reserve[]: 0 0 0 0 0 [ 1526.652815] syz-executor.3: [ 1526.664642] Mem-Info: [ 1526.712735] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1526.739368] active_anon:13447 inactive_anon:5981 isolated_anon:0 [ 1526.739368] active_file:360 inactive_file:422 isolated_file:0 [ 1526.739368] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1526.739368] slab_reclaimable:17199 slab_unreclaimable:109415 [ 1526.739368] mapped:52850 shmem:6919 pagetables:704 bounce:0 [ 1526.739368] free:25189 free_pcp:107 free_cma:0 [ 1526.777633] lowmem_reserve[]: 0 0 0 0 0 [ 1526.781924] Node 1 Normal free:53404kB min:53696kB low:67120kB high:80544kB active_anon:372kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1526.789178] page allocation failure: order:4 [ 1526.813498] Node 0 active_anon:53416kB inactive_anon:23924kB active_file:824kB inactive_file:1284kB unevictable:0kB isolated(anon):0kB isolated(file):136kB mapped:185884kB dirty:0kB writeback:0kB shmem:27676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1526.855006] lowmem_reserve[]: 0 0 0 0 0 [ 1526.859842] Node 0 DMA: 1*4kB (E) 5*8kB (U) 5*16kB (UE) 8*32kB (UE) 2*64kB (UE) 2*128kB (UE) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11004kB [ 1526.866687] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1526.884221] Node 0 [ 1526.890408] Node 1 active_anon:372kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24716kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1526.890921] syz-executor.3 cpuset= [ 1526.892960] Node 0 [ 1526.926764] DMA32: 3215*4kB (UME) 1812*8kB (UME) 386*16kB (UME) 70*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35772kB [ 1526.947254] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1526.960671] DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1526.966801] / [ 1526.989493] Node 1 Normal: 25*4kB (U) 17*8kB (UM) 726*16kB (U) 1297*32kB (U) 5*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53932kB [ 1527.006423] mems_allowed=0-1 [ 1527.008693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1527.009698] CPU: 0 PID: 13761 Comm: syz-executor.3 Not tainted 4.14.226-syzkaller #0 [ 1527.019135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1527.026241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.034877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1527.044181] Call Trace: [ 1527.044208] dump_stack+0x1b2/0x281 [ 1527.044222] warn_alloc.cold+0x96/0x1cc [ 1527.053090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1527.055662] ? zone_watermark_ok_safe+0x220/0x220 [ 1527.059277] 7065 total pagecache pages [ 1527.063234] __alloc_pages_nodemask+0x2127/0x2720 [ 1527.071815] 0 pages in swap cache [ 1527.076626] ? lock_acquire+0x170/0x3f0 [ 1527.076643] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1527.080501] Swap cache stats: add 0, delete 0, find 0/0 [ 1527.085334] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1527.088797] Free swap = 0kB [ 1527.092743] ? __mutex_unlock_slowpath+0x75/0x770 [ 1527.097666] Total swap = 0kB [ 1527.103008] ? retint_kernel+0x2d/0x2d [ 1527.108485] 2097051 pages RAM [ 1527.111468] alloc_pages_current+0x155/0x260 [ 1527.116278] 0 pages HighMem/MovableOnly [ 1527.119292] ion_page_pool_alloc+0x118/0x1b0 [ 1527.119303] ion_system_heap_allocate+0x133/0x8c0 [ 1527.119316] ? _raw_spin_unlock+0x29/0x40 [ 1527.119326] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1527.123194] 363840 pages reserved [ 1527.126317] ? ion_system_contig_heap_create+0x130/0x130 [ 1527.130811] 0 pages cma reserved [ 1527.134769] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1527.139169] Out of memory (oom_kill_allocating_task): Kill process 13789 (syz-executor.5) score 0 or sacrifice child [ 1527.144003] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1527.148181] Killed process 13783 (syz-executor.5) total-vm:93120kB, anon-rss:76kB, file-rss:33752kB, shmem-rss:0kB [ 1527.153050] ion_alloc+0x27a/0x810 [ 1527.163198] oom_reaper: reaped process 13774 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1527.165390] ? ion_dma_buf_release+0x40/0x40 [ 1527.177445] oom_reaper: reaped process 13783 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1527.181081] ? __might_fault+0x177/0x1b0 [ 1527.185962] lowmem_reserve[]: [ 1527.196566] ion_ioctl+0xea/0x1f0 [ 1527.196579] ? ion_query_heaps+0x360/0x360 [ 1527.196591] ? ion_query_heaps+0x360/0x360 [ 1527.196602] do_vfs_ioctl+0x75a/0xff0 [ 1527.196613] ? ioctl_preallocate+0x1a0/0x1a0 [ 1527.200139] 0 [ 1527.210112] ? lock_downgrade+0x740/0x740 [ 1527.210127] ? __fget+0x225/0x360 [ 1527.210136] ? do_vfs_ioctl+0xff0/0xff0 [ 1527.210150] ? security_file_ioctl+0x83/0xb0 [ 1527.214563] 2717 2718 [ 1527.224538] SyS_ioctl+0x7f/0xb0 [ 1527.224549] ? do_vfs_ioctl+0xff0/0xff0 [ 1527.224559] do_syscall_64+0x1d5/0x640 [ 1527.224580] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1527.228652] 2718 [ 1527.231729] RIP: 0033:0x465f69 [ 1527.235154] 2718 [ 1527.239385] RSP: 002b:00007f09f39ce188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1527.239395] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1527.239399] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1527.239404] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1527.239408] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1527.239413] R13: 00007ffd9007748f R14: 00007f09f39ce300 R15: 0000000000022000 [ 1527.345107] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1527.362525] syz-executor.4: page allocation failure: order:4, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1527.373585] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1527.379217] CPU: 1 PID: 13784 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 1527.384854] syz-fuzzer cpuset= [ 1527.387122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.387126] Call Trace: [ 1527.387146] dump_stack+0x1b2/0x281 [ 1527.387159] warn_alloc.cold+0x96/0x1cc [ 1527.387170] ? zone_watermark_ok_safe+0x220/0x220 [ 1527.387191] __alloc_pages_nodemask+0x2127/0x2720 [ 1527.387202] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1527.387212] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1527.397491] / [ 1527.399774] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1527.402464] mems_allowed=0-1 [ 1527.406173] ? mark_held_locks+0xa6/0xf0 [ 1527.443571] ? cache_grow_begin+0x41/0x630 [ 1527.447808] cache_grow_begin+0x91/0x630 [ 1527.451866] ? cache_grow_begin+0x91/0x630 [ 1527.456110] fallback_alloc+0x207/0x2c0 [ 1527.460261] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 1527.465010] ? can_notifier+0x300/0x300 [ 1527.468996] can_pernet_init+0x69/0x410 [ 1527.472968] ops_init+0xaa/0x3e0 [ 1527.476328] setup_net+0x22f/0x530 [ 1527.479859] ? rtnl_net_dumpid_one+0x240/0x240 [ 1527.484440] ? kmem_cache_alloc+0x35f/0x3c0 [ 1527.488756] copy_net_ns+0x19b/0x440 [ 1527.492488] create_new_namespaces+0x375/0x720 [ 1527.497075] unshare_nsproxy_namespaces+0xa1/0x1d0 [ 1527.502002] SyS_unshare+0x308/0x7f0 [ 1527.505715] ? walk_process_tree+0x2a0/0x2a0 [ 1527.510114] ? task_work_run+0xfd/0x190 [ 1527.514089] ? do_syscall_64+0x4c/0x640 [ 1527.518061] ? walk_process_tree+0x2a0/0x2a0 [ 1527.522463] do_syscall_64+0x1d5/0x640 [ 1527.526374] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1527.531563] RIP: 0033:0x467517 [ 1527.534757] RSP: 002b:00007fffbde29428 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1527.542471] RAX: ffffffffffffffda RBX: 000000000056ca68 RCX: 0000000000467517 [ 1527.549770] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000040000000 [ 1527.557241] RBP: 00007fffbde29450 R08: 0000000000000000 R09: 0000000000000000 [ 1527.565933] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000ffffffff [ 1527.573199] R13: 000000000056ca68 R14: 0000000000000000 R15: 0000000000400538 [ 1527.585861] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:53960kB inactive_anon:23932kB active_file:48kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:3108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1527.609965] CPU: 0 PID: 7957 Comm: syz-fuzzer Not tainted 4.14.226-syzkaller #0 [ 1527.618594] lowmem_reserve[]: [ 1527.621883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.621891] Call Trace: [ 1527.625014] 0 [ 1527.634461] dump_stack+0x1b2/0x281 [ 1527.634474] dump_header+0x178/0x82f [ 1527.634485] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1527.634494] ? ___ratelimit+0x2cd/0x530 [ 1527.634505] oom_kill_process.cold+0x10/0xb18 [ 1527.637103] 0 [ 1527.638916] out_of_memory+0xe3e/0x1190 [ 1527.642507] 0 [ 1527.646223] ? oom_killer_disable+0x1c0/0x1c0 [ 1527.651349] 0 [ 1527.655275] ? mutex_trylock+0x152/0x1a0 [ 1527.659793] 0 [ 1527.661547] __alloc_pages_nodemask+0x23e1/0x2720 [ 1527.667321] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1527.667346] alloc_pages_current+0x155/0x260 [ 1527.671825] Node 0 [ 1527.673614] filemap_fault+0xea3/0x1980 [ 1527.677789] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1527.679543] ext4_filemap_fault+0x84/0xb0 [ 1527.684348] lowmem_reserve[]: [ 1527.689209] __do_fault+0xfa/0x380 [ 1527.689219] __handle_mm_fault+0x2497/0x4620 [ 1527.689228] ? vm_insert_page+0x7c0/0x7c0 [ 1527.689248] handle_mm_fault+0x391/0x860 [ 1527.693644] 0 [ 1527.695896] __do_page_fault+0x549/0xad0 [ 1527.699915] 0 [ 1527.724780] ? spurious_fault+0x640/0x640 [ 1527.724790] ? do_page_fault+0x60/0x500 [ 1527.724800] ? page_fault+0x2f/0x50 [ 1527.724807] page_fault+0x45/0x50 [ 1527.724818] RIP: 0000:0x93f280 [ 1527.729235] 0 [ 1527.732180] RSP: 2e000:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1527.735700] 0 [ 1527.772500] syz-executor.3: [ 1527.779239] 0 [ 1527.803196] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1527.815450] Node 1 Normal free:26764kB min:53696kB low:67120kB high:80544kB active_anon:408kB inactive_anon:0kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:72kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1527.848795] lowmem_reserve[]: 0 0 0 0 0 [ 1527.852826] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 5*16kB (UE) 8*32kB (UE) 2*64kB (UE) 2*128kB (UE) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10976kB [ 1527.864691] syz-executor.3 cpuset= [ 1527.874504] Node 0 DMA32: 2023*4kB (UME) 897*8kB (UME) 194*16kB (UME) 11*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18724kB [ 1527.886140] / [ 1527.900104] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1527.914852] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 0*16kB 817*32kB (U) 5*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26764kB [ 1527.924430] mems_allowed=0-1 [ 1527.934275] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1527.943256] Mem-Info: [ 1527.945681] active_anon:13567 inactive_anon:5983 isolated_anon:0 [ 1527.945681] active_file:67 inactive_file:0 isolated_file:0 [ 1527.945681] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1527.945681] slab_reclaimable:17173 slab_unreclaimable:109474 [ 1527.945681] mapped:52212 shmem:6922 pagetables:795 bounce:0 [ 1527.945681] free:13958 free_pcp:36 free_cma:0 [ 1527.965624] CPU: 0 PID: 13761 Comm: syz-executor.3 Not tainted 4.14.226-syzkaller #0 [ 1527.984873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1527.986659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.986663] Call Trace: [ 1527.986684] dump_stack+0x1b2/0x281 [ 1527.986698] warn_alloc.cold+0x96/0x1cc [ 1527.997288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1528.006611] ? zone_watermark_ok_safe+0x220/0x220 [ 1528.006622] ? usleep_range+0x130/0x130 [ 1528.006634] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1528.009223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1528.012835] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1528.017535] Node 0 active_anon:53860kB inactive_anon:23932kB active_file:140kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184132kB dirty:0kB writeback:0kB shmem:27688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1528.026310] ? run_timer_softirq+0x5a0/0x5a0 [ 1528.031171] 6978 total pagecache pages [ 1528.035097] __alloc_pages_nodemask+0x2127/0x2720 [ 1528.040204] 0 pages in swap cache [ 1528.049980] ? lock_acquire+0x170/0x3f0 [ 1528.049999] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1528.055023] Node 1 active_anon:408kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24716kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1528.082758] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1528.082774] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1528.082788] ? retint_kernel+0x2d/0x2d [ 1528.082801] alloc_pages_current+0x155/0x260 [ 1528.087243] Swap cache stats: add 0, delete 0, find 0/0 [ 1528.091089] ion_page_pool_alloc+0x118/0x1b0 [ 1528.095908] Free swap = 0kB [ 1528.099365] ion_system_heap_allocate+0x133/0x8c0 [ 1528.099378] ? _raw_spin_unlock+0x29/0x40 [ 1528.099387] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1528.099397] ? ion_system_contig_heap_create+0x130/0x130 [ 1528.099412] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1528.103365] Total swap = 0kB [ 1528.108190] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1528.108202] ion_alloc+0x27a/0x810 [ 1528.108217] ? ion_dma_buf_release+0x40/0x40 [ 1528.135317] Node 0 [ 1528.139757] ? __might_fault+0x177/0x1b0 [ 1528.139774] ion_ioctl+0xea/0x1f0 [ 1528.145208] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1528.149074] ? ion_query_heaps+0x360/0x360 [ 1528.149088] ? ion_query_heaps+0x360/0x360 [ 1528.149098] do_vfs_ioctl+0x75a/0xff0 [ 1528.153483] lowmem_reserve[]: [ 1528.158936] ? ioctl_preallocate+0x1a0/0x1a0 [ 1528.158945] ? lock_downgrade+0x740/0x740 [ 1528.158958] ? __fget+0x225/0x360 [ 1528.163358] 0 [ 1528.166386] ? do_vfs_ioctl+0xff0/0xff0 [ 1528.166398] ? security_file_ioctl+0x83/0xb0 [ 1528.166408] SyS_ioctl+0x7f/0xb0 [ 1528.166417] ? do_vfs_ioctl+0xff0/0xff0 [ 1528.171260] 2097051 pages RAM [ 1528.175397] do_syscall_64+0x1d5/0x640 [ 1528.180332] 2717 [ 1528.185756] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1528.190766] 0 pages HighMem/MovableOnly [ 1528.193737] RIP: 0033:0x465f69 [ 1528.198574] 363840 pages reserved [ 1528.202093] RSP: 002b:00007f09f39ce188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1528.206511] 2718 [ 1528.208705] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 1528.212743] 2718 [ 1528.216174] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1528.216182] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1528.241728] 0 pages cma reserved [ 1528.245896] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1528.276423] 2718 [ 1528.279070] R13: 00007ffd9007748f R14: 00007f09f39ce300 R15: 0000000000022000 [ 1528.461917] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1528.486467] Node 0 DMA32 free:61852kB min:36200kB low:45248kB high:54296kB active_anon:53320kB inactive_anon:23932kB active_file:120kB inactive_file:896kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2960kB bounce:0kB free_pcp:1280kB local_pcp:660kB free_cma:0kB [ 1528.516444] Bluetooth: hci3 command 0x0409 tx timeout [ 1528.539389] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1528.586426] lowmem_reserve[]: 0 0 0 0 0 [ 1528.590452] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1528.621324] Bluetooth: hci4 command 0x0409 tx timeout [ 1528.636260] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1528.661126] IPVS: ftp: loaded support on port[0] = 21 [ 1528.665126] lowmem_reserve[]: 0 0 0 0 0 [ 1528.675383] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1528.676699] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1528.691890] Node 1 Normal free:43412kB min:53696kB low:67120kB high:80544kB active_anon:408kB inactive_anon:0kB active_file:1580kB inactive_file:5776kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:72kB bounce:0kB free_pcp:664kB local_pcp:0kB free_cma:0kB [ 1528.706527] systemd[1]: Stopped Journal Service. [ 1528.749425] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1528.754579] CPU: 1 PID: 13774 Comm: syz-executor.2 Not tainted 4.14.226-syzkaller #0 [ 1528.762543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1528.771895] Call Trace: [ 1528.774485] dump_stack+0x1b2/0x281 [ 1528.778121] warn_alloc.cold+0x96/0x1cc [ 1528.782124] ? zone_watermark_ok_safe+0x220/0x220 [ 1528.786141] systemd[1]: Starting Journal Service... [ 1528.786981] __alloc_pages_nodemask+0x2127/0x2720 [ 1528.786999] ? lock_acquire+0x170/0x3f0 [ 1528.787014] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1528.787031] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1528.787042] ? __mutex_unlock_slowpath+0x75/0x770 [ 1528.816214] ? retint_kernel+0x2d/0x2d [ 1528.818214] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1528.820108] alloc_pages_current+0x155/0x260 [ 1528.820125] ion_page_pool_alloc+0x118/0x1b0 [ 1528.820137] ion_system_heap_allocate+0x133/0x8c0 [ 1528.820148] ? _raw_spin_unlock+0x29/0x40 [ 1528.820158] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1528.820170] ? ion_system_contig_heap_create+0x130/0x130 [ 1528.845991] warn_alloc_show_mem: 2 callbacks suppressed [ 1528.845995] Mem-Info: [ 1528.849234] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1528.849247] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1528.849261] ion_alloc+0x27a/0x810 [ 1528.849277] ? ion_dma_buf_release+0x40/0x40 [ 1528.854828] active_anon:13657 inactive_anon:5983 isolated_anon:0 [ 1528.854828] active_file:523 inactive_file:2459 isolated_file:0 [ 1528.854828] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1528.854828] slab_reclaimable:17144 slab_unreclaimable:110026 [ 1528.854828] mapped:54359 shmem:6922 pagetables:832 bounce:0 [ 1528.854828] free:61784 free_pcp:327 free_cma:0 [ 1528.860079] ? __might_fault+0x177/0x1b0 [ 1528.860095] ion_ioctl+0xea/0x1f0 [ 1528.860105] ? ion_query_heaps+0x360/0x360 [ 1528.860116] ? ion_query_heaps+0x360/0x360 [ 1528.860126] do_vfs_ioctl+0x75a/0xff0 [ 1528.860137] ? ioctl_preallocate+0x1a0/0x1a0 [ 1528.860146] ? lock_downgrade+0x740/0x740 [ 1528.860159] ? __fget+0x225/0x360 [ 1528.860167] ? do_vfs_ioctl+0xff0/0xff0 [ 1528.860178] ? security_file_ioctl+0x83/0xb0 [ 1528.860187] SyS_ioctl+0x7f/0xb0 [ 1528.860194] ? do_vfs_ioctl+0xff0/0xff0 [ 1528.860205] do_syscall_64+0x1d5/0x640 [ 1528.860222] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1528.860230] RIP: 0033:0x465f69 [ 1528.860235] RSP: 002b:00007ff8ba015188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1528.860245] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1528.860263] RDX: 0000000020000240 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1528.995624] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1529.002904] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1529.010169] R13: 00007ffef483301f R14: 00007ff8ba015300 R15: 0000000000022000 [ 1529.029455] Node 0 active_anon:53920kB inactive_anon:23932kB active_file:512kB inactive_file:4428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186200kB dirty:100kB writeback:0kB shmem:27688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1529.042567] lowmem_reserve[]: [ 1529.070421] Node 1 active_anon:408kB inactive_anon:0kB active_file:2180kB inactive_file:5008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30836kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1529.079531] 0 [ 1529.106169] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1529.123774] 0 [ 1529.139181] lowmem_reserve[]: [ 1529.141447] 0 [ 1529.141839] 0 [ 1529.145343] 0 [ 1529.147727] 2717 [ 1529.148590] 0 [ 1529.150673] 2718 [ 1529.176312] 2718 2718 [ 1529.179842] Node 0 DMA: 3*4kB (UE) 4*8kB (U) 5*16kB (UE) 8*32kB (UE) 2*64kB (UE) 2*128kB (UE) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11004kB [ 1529.196491] Node 0 DMA32 free:178696kB min:36200kB low:45248kB high:54296kB active_anon:55492kB inactive_anon:23928kB active_file:1272kB inactive_file:4948kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7808kB pagetables:3564kB bounce:0kB free_pcp:624kB local_pcp:264kB free_cma:0kB [ 1529.256938] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1529.268195] lowmem_reserve[]: 0 0 0 0 0 [ 1529.272400] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1529.272648] Node 0 [ 1529.301980] lowmem_reserve[]: 0 0 0 0 0 [ 1529.354713] chnl_net:caif_netlink_parms(): no params data found [ 1529.376451] Node 1 Normal free:51860kB min:53696kB low:67120kB high:80544kB active_anon:432kB inactive_anon:8kB active_file:3044kB inactive_file:4156kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:72kB bounce:0kB free_pcp:628kB local_pcp:628kB free_cma:0kB [ 1529.401459] syz-executor.4: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1529.415935] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1529.421289] CPU: 1 PID: 13784 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 1529.429164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1529.438514] Call Trace: [ 1529.441101] dump_stack+0x1b2/0x281 [ 1529.444732] warn_alloc.cold+0x96/0x1cc [ 1529.448706] ? zone_watermark_ok_safe+0x220/0x220 [ 1529.453651] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1529.459108] ? wake_all_kswapds+0x175/0x360 [ 1529.463424] __alloc_pages_nodemask+0x2127/0x2720 [ 1529.468254] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1529.473260] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1529.478364] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1529.483282] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1529.488122] ? cache_alloc_refill+0x2fa/0x350 [ 1529.492603] ? ____cache_alloc_node+0x156/0x1d0 [ 1529.497961] cache_grow_begin+0x91/0x630 [ 1529.502010] ? cache_grow_begin+0x91/0x630 [ 1529.506233] fallback_alloc+0x207/0x2c0 [ 1529.510204] __kmalloc+0x213/0x400 [ 1529.513871] ? batadv_hash_new+0xaa/0x270 [ 1529.518022] batadv_hash_new+0xaa/0x270 [ 1529.521993] ? queue_delayed_work_on+0xfc/0x1d0 [ 1529.526748] batadv_tt_init+0x260/0x390 [ 1529.530757] batadv_mesh_init+0x478/0x630 [ 1529.534904] batadv_softif_init_late+0xa26/0xc90 [ 1529.539659] ? batadv_get_strings+0x40/0x40 [ 1529.544038] ? dev_valid_name+0x1a0/0x1a0 [ 1529.548238] ? batadv_get_strings+0x40/0x40 [ 1529.552571] register_netdevice+0x291/0xe40 [ 1529.556895] ? netdev_change_features+0xa0/0xa0 [ 1529.561578] ? rtnl_create_link+0x129/0x890 [ 1529.566200] rtnl_newlink+0x14dc/0x1830 [ 1529.570379] ? rtnl_newlink+0x43d/0x1830 [ 1529.574458] ? __lock_acquire+0x5fc/0x3f20 [ 1529.579072] ? trace_hardirqs_on+0x10/0x10 [ 1529.583314] ? rtnl_dellink+0x6a0/0x6a0 [ 1529.587291] ? trace_hardirqs_on+0x10/0x10 [ 1529.591517] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1529.597402] ? deref_stack_reg+0x124/0x1a0 [ 1529.601669] ? lock_acquire+0x170/0x3f0 [ 1529.605632] ? lock_downgrade+0x740/0x740 [ 1529.609773] ? rtnl_dellink+0x6a0/0x6a0 [ 1529.613736] rtnetlink_rcv_msg+0x3be/0xb10 [ 1529.617985] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1529.622479] ? __netlink_lookup+0x345/0x5d0 [ 1529.626801] netlink_rcv_skb+0x125/0x390 [ 1529.630859] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1529.635345] ? netlink_ack+0x9a0/0x9a0 [ 1529.639237] netlink_unicast+0x437/0x610 [ 1529.643407] ? netlink_sendskb+0xd0/0xd0 [ 1529.647459] ? __check_object_size+0x179/0x230 [ 1529.652060] netlink_sendmsg+0x62e/0xb80 [ 1529.656120] ? nlmsg_notify+0x170/0x170 [ 1529.660090] ? security_socket_sendmsg+0x83/0xb0 [ 1529.664843] ? nlmsg_notify+0x170/0x170 [ 1529.668831] sock_sendmsg+0xb5/0x100 [ 1529.672535] SyS_sendto+0x1c7/0x2c0 [ 1529.676153] ? SyS_getpeername+0x220/0x220 [ 1529.680397] ? up_read+0x17/0x30 [ 1529.683752] ? __do_page_fault+0x159/0xad0 [ 1529.687985] ? do_syscall_64+0x4c/0x640 [ 1529.691970] ? SyS_getpeername+0x220/0x220 [ 1529.696208] do_syscall_64+0x1d5/0x640 [ 1529.700107] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1529.705291] RIP: 0033:0x4193fc [ 1529.708469] RSP: 002b:00007fffbde28c00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1529.716262] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193fc [ 1529.723541] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1529.730800] RBP: 0000000000000000 R08: 00007fffbde28c54 R09: 000000000000000c [ 1529.738060] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1529.745420] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1529.782968] DMA32: 1983*4kB (UME) 735*8kB (UME) 2378*16kB (UME) 3866*32kB (UME) 2*64kB (ME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 175700kB [ 1529.800223] lowmem_reserve[]: 0 0 0 0 0 [ 1529.808554] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1529.823523] Node 1 Normal: 332*4kB (UM) 1557*8kB (UM) 756*16kB (UM) 800*32kB (U) 7*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51928kB [ 1529.833186] Node 0 [ 1529.845617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1529.876899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1529.879617] systemd-journald[13814]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1529.885600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1529.910243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1529.913539] DMA: [ 1529.920054] 10245 total pagecache pages [ 1529.926081] 0 pages in swap cache [ 1529.931215] Swap cache stats: add 0, delete 0, find 0/0 [ 1529.933159] 3*4kB [ 1529.937407] Free swap = 0kB [ 1529.946084] Total swap = 0kB [ 1529.955660] (UE) 4*8kB (U) 5*16kB (UE) 8*32kB (UE) 2*64kB (UE) 2*128kB (UE) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11004kB [ 1529.956244] 2097051 pages RAM [ 1529.973064] 0 pages HighMem/MovableOnly [ 1529.977576] 363840 pages reserved [ 1529.981196] 0 pages cma reserved [ 1529.984565] Out of memory (oom_kill_allocating_task): Kill process 7957 (syz-fuzzer) score 0 or sacrifice child [ 1530.012381] Killed process 13780 (syz-executor.5) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1530.043431] warn_alloc_show_mem: 1 callbacks suppressed [ 1530.043435] Mem-Info: [ 1530.060296] oom_reaper: reaped process 13780 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1530.070486] Node 0 DMA32: 1411*4kB (UE) 716*8kB (UE) 1914*16kB (UE) 3874*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 165964kB [ 1530.076662] active_anon:14481 inactive_anon:7494 isolated_anon:0 [ 1530.076662] active_file:1728 inactive_file:1180 isolated_file:33 [ 1530.076662] unevictable:0 dirty:37 writeback:0 unstable:0 [ 1530.076662] slab_reclaimable:15092 slab_unreclaimable:113492 [ 1530.076662] mapped:45517 shmem:8485 pagetables:1014 bounce:0 [ 1530.076662] free:57497 free_pcp:692 free_cma:0 [ 1530.103074] Node 0 [ 1530.118223] Node 0 active_anon:57480kB inactive_anon:31960kB active_file:3156kB inactive_file:3320kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:153268kB dirty:148kB writeback:0kB shmem:35812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1530.120461] systemd-journald[13814]: /dev/kmsg buffer overrun, some messages lost. [ 1530.141918] Normal: [ 1530.148730] Node 1 active_anon:444kB inactive_anon:16kB active_file:3756kB inactive_file:1400kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:29900kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1530.167126] 0*4kB [ 1530.186657] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1530.208385] 0*8kB [ 1530.218383] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1530.233902] Node 0 DMA32 free:163816kB min:36200kB low:45248kB high:54296kB active_anon:56780kB inactive_anon:31960kB active_file:3156kB inactive_file:3320kB unevictable:0kB writepending:148kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:3836kB bounce:0kB free_pcp:1344kB local_pcp:692kB free_cma:0kB [ 1530.248355] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1530.285454] Node 1 Normal: 405*4kB (UM) 1603*8kB (UM) 794*16kB (UM) 841*32kB (UM) 23*64kB (UM) 4*128kB (UM) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 56812kB [ 1530.300913] lowmem_reserve[]: 0 0 0 0 0 [ 1530.304922] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1530.331979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1530.346856] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1530.357082] ------------[ cut here ]------------ [ 1530.358360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1530.361862] WARNING: CPU: 1 PID: 13784 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1530.361869] Kernel panic - not syncing: panic_on_warn set ... [ 1530.361869] [ 1530.371164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1530.379541] CPU: 1 PID: 13784 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 [ 1530.379546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1530.379550] Call Trace: [ 1530.379567] dump_stack+0x1b2/0x281 [ 1530.379606] panic+0x1f9/0x42d [ 1530.379615] ? add_taint.cold+0x16/0x16 [ 1530.379627] ? debug_print_object.cold+0xa7/0xdb [ 1530.379637] ? debug_print_object.cold+0xa7/0xdb [ 1530.379643] __warn.cold+0x20/0x44 [ 1530.379703] ? ist_end_non_atomic+0x10/0x10 [ 1530.379713] ? debug_print_object.cold+0xa7/0xdb [ 1530.379754] report_bug+0x208/0x250 [ 1530.379765] do_error_trap+0x195/0x2d0 [ 1530.379773] ? math_error+0x2d0/0x2d0 [ 1530.379788] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1530.379801] invalid_op+0x1b/0x40 [ 1530.379811] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1530.379815] RSP: 0018:ffff888073a3f248 EFLAGS: 00010086 [ 1530.408517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1530.413439] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1530.416011] 11075 total pagecache pages [ 1530.419630] RDX: 0000000000000000 RSI: ffffffff878bbb80 RDI: ffffed100e747e3f [ 1530.419635] RBP: ffffffff878b6e40 R08: 0000000000000061 R09: 0000000000000001 [ 1530.419639] R10: 0000000000000000 R11: ffff888096e5c2c0 R12: 0000000000000000 [ 1530.419643] R13: 0000000000000000 R14: ffff8880b42ad730 R15: 1ffff1100e747e52 [ 1530.419671] ? debug_print_object.cold+0xa7/0xdb [ 1530.419684] debug_object_assert_init+0x1d3/0x2d0 [ 1530.419695] ? debug_object_active_state+0x330/0x330 [ 1530.419702] ? rtnl_newlink+0x14dc/0x1830 [ 1530.419711] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1530.465823] 0 pages in swap cache [ 1530.469184] ? netlink_rcv_skb+0x125/0x390 [ 1530.469200] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1530.469210] del_timer+0x5d/0xe0 [ 1530.469218] ? process_timeout+0x20/0x20 [ 1530.469230] try_to_grab_pending+0x243/0x610 [ 1530.469239] __cancel_work_timer+0x90/0x460 [ 1530.469247] ? work_on_cpu_safe+0x70/0x70 [ 1530.469258] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1530.469269] batadv_nc_mesh_free+0x41/0x120 [ 1530.469278] batadv_mesh_free+0x70/0x150 [ 1530.469287] batadv_mesh_init+0x561/0x630 [ 1530.469297] batadv_softif_init_late+0xa26/0xc90 [ 1530.469306] ? batadv_get_strings+0x40/0x40 [ 1530.469315] ? dev_valid_name+0x1a0/0x1a0 [ 1530.469324] ? batadv_get_strings+0x40/0x40 [ 1530.469332] register_netdevice+0x291/0xe40 [ 1530.469344] ? netdev_change_features+0xa0/0xa0 [ 1530.469360] ? rtnl_create_link+0x129/0x890 [ 1530.469370] rtnl_newlink+0x14dc/0x1830 [ 1530.469376] ? rtnl_newlink+0x43d/0x1830 [ 1530.469384] ? __lock_acquire+0x5fc/0x3f20 [ 1530.469398] ? trace_hardirqs_on+0x10/0x10 [ 1530.469405] ? rtnl_dellink+0x6a0/0x6a0 [ 1530.469412] ? trace_hardirqs_on+0x10/0x10 [ 1530.469420] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1530.469428] ? deref_stack_reg+0x124/0x1a0 [ 1530.469462] ? lock_acquire+0x170/0x3f0 [ 1530.478794] Swap cache stats: add 0, delete 0, find 0/0 [ 1530.481216] ? lock_downgrade+0x740/0x740 [ 1530.481227] ? rtnl_dellink+0x6a0/0x6a0 [ 1530.481234] rtnetlink_rcv_msg+0x3be/0xb10 [ 1530.481244] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1530.481252] ? __netlink_lookup+0x345/0x5d0 [ 1530.481265] netlink_rcv_skb+0x125/0x390 [ 1530.481272] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1530.481281] ? netlink_ack+0x9a0/0x9a0 [ 1530.481295] netlink_unicast+0x437/0x610 [ 1530.481305] ? netlink_sendskb+0xd0/0xd0 [ 1530.481314] ? __check_object_size+0x179/0x230 [ 1530.481324] netlink_sendmsg+0x62e/0xb80 [ 1530.481336] ? nlmsg_notify+0x170/0x170 [ 1530.481348] ? security_socket_sendmsg+0x83/0xb0 [ 1530.481362] ? nlmsg_notify+0x170/0x170 [ 1530.526510] Free swap = 0kB [ 1530.530376] sock_sendmsg+0xb5/0x100 [ 1530.535151] Total swap = 0kB [ 1530.540010] SyS_sendto+0x1c7/0x2c0 [ 1530.540021] ? SyS_getpeername+0x220/0x220 [ 1530.540044] ? up_read+0x17/0x30 [ 1530.540054] ? __do_page_fault+0x159/0xad0 [ 1530.540061] ? do_syscall_64+0x4c/0x640 [ 1530.540068] ? SyS_getpeername+0x220/0x220 [ 1530.540075] do_syscall_64+0x1d5/0x640 [ 1530.540089] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1530.540098] RIP: 0033:0x4193fc [ 1530.540102] RSP: 002b:00007fffbde28c00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1530.540111] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193fc [ 1530.540114] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1530.540118] RBP: 0000000000000000 R08: 00007fffbde28c54 R09: 000000000000000c [ 1530.540122] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1530.540127] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1530.545270] Kernel Offset: disabled [ 1530.837927] Rebooting in 86400 seconds..