: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1696.211079] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:940kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1696.248620] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1696.281992] Node 0 DMA32 free:27432kB min:36384kB low:45480kB high:54576kB active_anon:874016kB inactive_anon:1011236kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17472kB pagetables:30532kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 1696.333299] lowmem_reserve[]: 0 0 0 0 0 [ 1696.337435] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1696.378730] lowmem_reserve[]: 0 0 0 0 0 [ 1696.388544] Node 1 Normal free:44292kB min:53504kB low:66880kB high:80256kB active_anon:2212360kB inactive_anon:1183160kB active_file:316kB inactive_file:0kB unevictable:0kB writepending:36kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23104kB pagetables:87672kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1696.429652] lowmem_reserve[]: 0 0 0 0 0 [ 1696.433739] Node 0 DMA: 1*4kB (E) 13*8kB (UMH) 5*16kB (MH) 2*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1696.507784] Node 0 DMA32: 324*4kB (UME) 2096*8kB (UE) 297*16kB (UME) 42*32kB (UME) 52*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27488kB [ 1696.575256] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1696.660096] Node 1 Normal: 821*4kB (UME) 374*8kB (UMEH) 86*16kB (UMEH) 83*32kB (UMEH) 30*64kB (UMH) 220*128kB (UM) 18*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44996kB [ 1696.716321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1696.779530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1696.823075] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1696.899704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1697.021205] 610114 total pagecache pages [ 1697.025329] 0 pages in swap cache [ 1697.028786] Swap cache stats: add 0, delete 0, find 0/0 [ 1697.164335] Free swap = 0kB [ 1697.167407] Total swap = 0kB [ 1697.221594] 1965979 pages RAM [ 1697.224740] 0 pages HighMem/MovableOnly [ 1697.228791] 335855 pages reserved [ 1697.325391] 0 pages cma reserved [ 1697.329028] Out of memory: Kill process 8648 (syz-executor.3) score 1007 or sacrifice child [ 1697.440557] Killed process 8648 (syz-executor.3) total-vm:73116kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB [ 1697.797981] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1697.988916] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 1698.053033] CPU: 1 PID: 7389 Comm: syz-executor.0 Not tainted 4.14.169-syzkaller #0 [ 1698.060996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1698.070358] Call Trace: [ 1698.072962] dump_stack+0x142/0x197 [ 1698.076615] dump_header+0x177/0x6cd [ 1698.080351] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1698.085561] ? ___ratelimit+0x55/0x537 [ 1698.089511] oom_kill_process.cold+0x10/0xadd [ 1698.094016] ? oom_unkillable_task+0x294/0x390 [ 1698.098620] ? lock_downgrade+0x740/0x740 [ 1698.102794] out_of_memory+0x2ee/0x1180 [ 1698.106785] ? lock_acquire+0x16f/0x430 [ 1698.110884] ? oom_killer_disable+0x1d0/0x1d0 [ 1698.115401] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1698.120342] __alloc_pages_slowpath+0x2251/0x2930 [ 1698.125337] ? __alloc_pages_nodemask+0x639/0x7a0 [ 1698.130806] ? warn_alloc+0xf0/0xf0 [ 1698.134462] ? __might_sleep+0x93/0xb0 [ 1698.138376] __alloc_pages_nodemask+0x62c/0x7a0 [ 1698.143072] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1698.148102] ? lock_downgrade+0x740/0x740 [ 1698.152354] alloc_pages_current+0xec/0x1e0 [ 1698.156847] __page_cache_alloc+0x248/0x3e0 [ 1698.161187] filemap_fault+0xcef/0x1de0 [ 1698.165705] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1698.170651] ? __lock_page_or_retry+0x8d0/0x8d0 [ 1698.175476] ? lock_acquire+0x16f/0x430 [ 1698.179457] ? ext4_filemap_fault+0x7b/0xb0 [ 1698.183794] ext4_filemap_fault+0x83/0xb0 [ 1698.187960] __do_fault+0x104/0x390 [ 1698.191776] __handle_mm_fault+0x23bd/0x33d0 [ 1698.196211] ? copy_page_range+0x1de0/0x1de0 [ 1698.200625] ? find_held_lock+0x35/0x130 [ 1698.204810] ? handle_mm_fault+0x1b6/0x7c0 [ 1698.209072] handle_mm_fault+0x293/0x7c0 [ 1698.213147] __do_page_fault+0x4c1/0xb80 [ 1698.217311] ? vmalloc_fault+0xe30/0xe30 [ 1698.221381] ? page_fault+0x2f/0x50 [ 1698.225028] do_page_fault+0x71/0x511 [ 1698.228836] ? page_fault+0x2f/0x50 [ 1698.232483] page_fault+0x45/0x50 [ 1698.236060] RIP: 0033:0x45a6f0 [ 1698.239254] RSP: 002b:00007ffe29378388 EFLAGS: 00010206 [ 1698.244623] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 0000000000459310 [ 1698.251901] RDX: 00007ffe29378390 RSI: 0000000000000003 RDI: 0000000000000001 [ 1698.259203] RBP: 000000000000131d R08: 0000000000000001 R09: 00000000024ea940 [ 1698.266841] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe29379570 [ 1698.274118] R13: 00007ffe29379560 R14: 0000000000000000 R15: 00007ffe29379570 [ 1700.345020] Mem-Info: [ 1700.347482] active_anon:767699 inactive_anon:549654 isolated_anon:0 [ 1700.347482] active_file:17 inactive_file:17 isolated_file:0 [ 1700.347482] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1700.347482] slab_reclaimable:21451 slab_unreclaimable:123481 [ 1700.347482] mapped:601267 shmem:610054 pagetables:29520 bounce:0 [ 1700.347482] free:24869 free_pcp:32 free_cma:0 [ 1700.736336] Node 0 active_anon:865956kB inactive_anon:1015456kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 137216kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1701.021132] Node 1 active_anon:2204840kB inactive_anon:1183160kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1181444kB dirty:0kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1701.115724] Node 0 DMA free:10468kB min:216kB low:268kB high:320kB active_anon:900kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1701.142761] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1701.147811] Node 0 DMA32 free:36328kB min:36384kB low:45480kB high:54576kB active_anon:865056kB inactive_anon:1011236kB active_file:52kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17440kB pagetables:30520kB bounce:0kB free_pcp:168kB local_pcp:40kB free_cma:0kB [ 1701.178714] lowmem_reserve[]: 0 0 0 0 0 [ 1701.183673] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1701.209332] lowmem_reserve[]: 0 0 0 0 0 [ 1701.213446] Node 1 Normal free:52728kB min:53504kB low:66880kB high:80256kB active_anon:2204840kB inactive_anon:1183160kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23040kB pagetables:87552kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1701.248281] lowmem_reserve[]: 0 0 0 0 0 [ 1701.252472] Node 0 DMA: 3*4kB (ME) 13*8kB (UMH) 5*16kB (MH) 3*32kB (MEH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10468kB [ 1701.280127] Node 0 DMA32: 718*4kB (UME) 2714*8kB (UME) 440*16kB (UME) 41*32kB (UME) 53*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36328kB [ 1701.294622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1701.305607] Node 1 Normal: 830*4kB (UME) 488*8kB (UMEH) 190*16kB (UMEH) 197*32kB (UMEH) 53*64kB (UMH) 220*128kB (UM) 18*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52728kB [ 1701.321454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1701.330655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1701.339237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1701.348148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1701.372873] 610088 total pagecache pages [ 1701.377109] 0 pages in swap cache [ 1701.478249] Swap cache stats: add 0, delete 0, find 0/0 [ 1701.506641] Free swap = 0kB [ 1701.509702] Total swap = 0kB [ 1701.600097] 1965979 pages RAM [ 1701.603244] 0 pages HighMem/MovableOnly [ 1701.607231] 335855 pages reserved [ 1701.669531] 0 pages cma reserved [ 1701.737307] Out of memory: Kill process 21198 (syz-executor.0) score 1007 or sacrifice child [ 1701.783642] Killed process 21198 (syz-executor.0) total-vm:72984kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB [ 1702.023216] oom_reaper: reaped process 21198 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:03:16 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:03:16 executing program 3: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) fstatfs(r6, 0x0) 21:03:16 executing program 5: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) fstatfs(r6, 0x0) 21:03:16 executing program 1: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) fstatfs(r6, 0x0) 21:03:16 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:03:16 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:03:16 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:03:16 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:03:16 executing program 3: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:03:17 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, 0x0, 0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x27f, 0x4) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) r8 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r10, 0x0) 21:03:22 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:03:23 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) [ 1710.711366] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1710.727868] modprobe cpuset=/ mems_allowed=0-1 [ 1710.740298] CPU: 0 PID: 8744 Comm: modprobe Not tainted 4.14.169-syzkaller #0 [ 1710.747783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1710.757149] Call Trace: [ 1710.759751] dump_stack+0x142/0x197 [ 1710.763587] ? databuf_lo_scan_elements+0xa8/0x4f0 [ 1710.768622] dump_header+0x177/0x6cd [ 1710.772347] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1710.777462] ? ___ratelimit+0x55/0x537 [ 1710.781367] oom_kill_process.cold+0x10/0xadd [ 1710.785871] ? rcu_read_unlock_special+0x639/0xd40 [ 1710.790813] ? lock_downgrade+0x740/0x740 [ 1710.795003] out_of_memory+0x2ee/0x1180 [ 1710.799193] ? lock_acquire+0x16f/0x430 [ 1710.803190] ? oom_killer_disable+0x1d0/0x1d0 [ 1710.807783] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1710.812725] __alloc_pages_slowpath+0x2251/0x2930 [ 1710.817594] ? warn_alloc+0xf0/0xf0 [ 1710.821289] ? __might_sleep+0x93/0xb0 [ 1710.825189] __alloc_pages_nodemask+0x62c/0x7a0 [ 1710.830011] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1710.835039] ? ____cache_alloc_node+0x1be/0x1d0 [ 1710.839822] ? cache_grow_begin+0x335/0x400 [ 1710.844164] cache_grow_begin+0x80/0x400 [ 1710.848260] ? __cpuset_node_allowed+0xff/0x450 [ 1710.852951] fallback_alloc+0x1fd/0x2c0 [ 1710.856942] ____cache_alloc_node+0x1be/0x1d0 [ 1710.861455] kmem_cache_alloc+0x1f3/0x780 [ 1710.865621] ? __do_page_fault+0x4e9/0xb80 [ 1710.869994] getname_flags+0xcb/0x580 [ 1710.873812] getname+0x1a/0x20 [ 1710.877124] do_sys_open+0x1e7/0x430 [ 1710.880974] ? filp_open+0x70/0x70 [ 1710.884541] SyS_open+0x2d/0x40 [ 1710.888341] ? do_sys_open+0x430/0x430 [ 1710.892239] do_syscall_64+0x1e8/0x640 [ 1710.896134] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1710.901142] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1710.906338] RIP: 0033:0x7ff1ee1a81a7 [ 1710.910051] RSP: 002b:00007fff6313da88 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1710.917769] RAX: ffffffffffffffda RBX: 00007ff1ee3b31c8 RCX: 00007ff1ee1a81a7 [ 1710.925044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ff1ee3ae01d [ 1710.932377] RBP: 00007fff6313db00 R08: 00007fff6313deff R09: 0000000000000000 [ 1710.939792] R10: 00007ff1ee3ae01d R11: 0000000000000246 R12: 0000000000000008 [ 1710.947144] R13: 00007ff1ee3b2040 R14: 0000000000000000 R15: 00007fff6313deff [ 1710.968173] Mem-Info: [ 1710.970723] active_anon:771919 inactive_anon:549652 isolated_anon:0 [ 1710.970723] active_file:16 inactive_file:13 isolated_file:20 [ 1710.970723] unevictable:0 dirty:0 writeback:12 unstable:0 [ 1710.970723] slab_reclaimable:21474 slab_unreclaimable:123334 [ 1710.970723] mapped:601295 shmem:610054 pagetables:29609 bounce:0 [ 1710.970723] free:20535 free_pcp:0 free_cma:0 [ 1711.004746] Node 0 active_anon:873712kB inactive_anon:1015456kB active_file:44kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223672kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 135168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1711.033608] Node 1 active_anon:2213964kB inactive_anon:1183152kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1181508kB dirty:0kB writeback:48kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1711.061679] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:940kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1711.107832] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1711.117463] Node 0 DMA32 free:27344kB min:36384kB low:45480kB high:54576kB active_anon:872804kB inactive_anon:1011236kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17536kB pagetables:30520kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1711.146777] lowmem_reserve[]: 0 0 0 0 0 [ 1711.151026] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1711.176666] lowmem_reserve[]: 0 0 0 0 0 [ 1711.180704] Node 1 Normal free:44200kB min:53504kB low:66880kB high:80256kB active_anon:2214020kB inactive_anon:1183152kB active_file:100kB inactive_file:52kB unevictable:0kB writepending:24kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23200kB pagetables:87928kB bounce:0kB free_pcp:140kB local_pcp:0kB free_cma:0kB [ 1711.211567] lowmem_reserve[]: 0 0 0 0 0 [ 1711.215690] Node 0 DMA: 1*4kB (E) 13*8kB (UMH) 5*16kB (MH) 2*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1711.233907] Node 0 DMA32: 285*4kB (UME) 2047*8kB (UME) 232*16kB (UME) 50*32kB (UME) 41*64kB (UM) 1*128kB (M) 3*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 27372kB [ 1711.255467] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1711.266647] Node 1 Normal: 318*4kB (UME) 179*8kB (UMEH) 115*16kB (UMEH) 109*32kB (UMEH) 60*64kB (UMEH) 220*128kB (UM) 18*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44640kB [ 1711.313546] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1711.365700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1711.409206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1711.445436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1711.458491] 610146 total pagecache pages [ 1711.497876] 0 pages in swap cache [ 1711.515466] Swap cache stats: add 0, delete 0, find 0/0 [ 1711.549255] Free swap = 0kB [ 1711.578800] Total swap = 0kB [ 1711.601636] 1965979 pages RAM [ 1711.604787] 0 pages HighMem/MovableOnly [ 1711.608766] 335855 pages reserved [ 1711.667842] 0 pages cma reserved [ 1711.712162] Out of memory: Kill process 8712 (syz-executor.3) score 1007 or sacrifice child [ 1711.764862] Killed process 8712 (syz-executor.3) total-vm:72852kB, anon-rss:16552kB, file-rss:34816kB, shmem-rss:0kB [ 1711.929091] oom_reaper: reaped process 8712 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1712.300702] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1712.320117] modprobe cpuset=/ mems_allowed=0-1 [ 1712.324767] CPU: 1 PID: 8744 Comm: modprobe Not tainted 4.14.169-syzkaller #0 [ 1712.332150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1712.341676] Call Trace: [ 1712.344278] dump_stack+0x142/0x197 [ 1712.347911] ? databuf_lo_scan_elements+0xa8/0x4f0 [ 1712.352860] dump_header+0x177/0x6cd [ 1712.356582] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1712.361700] ? ___ratelimit+0x55/0x537 [ 1712.365610] oom_kill_process.cold+0x10/0xadd [ 1712.370116] ? rcu_read_unlock_special+0x895/0xd40 [ 1712.375061] ? lock_downgrade+0x740/0x740 [ 1712.379370] out_of_memory+0x2ee/0x1180 [ 1712.383355] ? lock_acquire+0x16f/0x430 [ 1712.387349] ? oom_killer_disable+0x1d0/0x1d0 [ 1712.391854] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1712.396799] __alloc_pages_slowpath+0x2251/0x2930 [ 1712.401672] ? warn_alloc+0xf0/0xf0 [ 1712.405340] ? __might_sleep+0x93/0xb0 [ 1712.409242] __alloc_pages_nodemask+0x62c/0x7a0 [ 1712.413930] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1712.418958] ? ____cache_alloc_node+0x1be/0x1d0 [ 1712.423640] ? cache_grow_begin+0x335/0x400 [ 1712.427973] cache_grow_begin+0x80/0x400 [ 1712.432047] ? __cpuset_node_allowed+0xff/0x450 [ 1712.436856] fallback_alloc+0x1fd/0x2c0 [ 1712.440848] ____cache_alloc_node+0x1be/0x1d0 [ 1712.445350] kmem_cache_alloc+0x1f3/0x780 [ 1712.449498] ? __do_page_fault+0x4e9/0xb80 [ 1712.453804] getname_flags+0xcb/0x580 [ 1712.457728] getname+0x1a/0x20 [ 1712.460928] do_sys_open+0x1e7/0x430 [ 1712.464660] ? filp_open+0x70/0x70 [ 1712.468218] SyS_open+0x2d/0x40 [ 1712.471506] ? do_sys_open+0x430/0x430 [ 1712.475404] do_syscall_64+0x1e8/0x640 [ 1712.479422] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1712.484281] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1712.489478] RIP: 0033:0x7ff1ee1a81a7 [ 1712.493292] RSP: 002b:00007fff6313da88 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1712.501009] RAX: ffffffffffffffda RBX: 00007ff1ee3b31c8 RCX: 00007ff1ee1a81a7 [ 1712.508284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ff1ee3ae01d [ 1712.515663] RBP: 00007fff6313db00 R08: 00007fff6313deff R09: 0000000000000000 [ 1712.522972] R10: 00007ff1ee3ae01d R11: 0000000000000246 R12: 0000000000000008 [ 1712.530271] R13: 00007ff1ee3b2040 R14: 0000000000000000 R15: 00007fff6313deff [ 1713.306287] Mem-Info: [ 1713.309272] active_anon:767842 inactive_anon:549652 isolated_anon:0 [ 1713.309272] active_file:23 inactive_file:8 isolated_file:25 [ 1713.309272] unevictable:0 dirty:4 writeback:1 unstable:0 [ 1713.309272] slab_reclaimable:21470 slab_unreclaimable:123027 [ 1713.309272] mapped:601269 shmem:610054 pagetables:29590 bounce:0 [ 1713.309272] free:24887 free_pcp:13 free_cma:0 [ 1713.357237] Node 0 active_anon:858880kB inactive_anon:1015456kB active_file:108kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223632kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 129024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1713.406924] Node 1 active_anon:2212488kB inactive_anon:1183152kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1181444kB dirty:0kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1713.606402] Node 0 DMA free:10468kB min:216kB low:268kB high:320kB active_anon:900kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1713.770491] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1713.781320] Node 0 DMA32 free:41452kB min:36384kB low:45480kB high:54576kB active_anon:857980kB inactive_anon:1011236kB active_file:108kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30448kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1713.962112] lowmem_reserve[]: 0 0 0 0 0 [ 1713.966167] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1714.174086] lowmem_reserve[]: 0 0 0 0 0 [ 1714.178379] Node 1 Normal free:47732kB min:53504kB low:66880kB high:80256kB active_anon:2212488kB inactive_anon:1183152kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23168kB pagetables:87904kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1714.357764] lowmem_reserve[]: 0 0 0 0 0 [ 1714.368190] Node 0 DMA: 3*4kB (ME) 13*8kB (UMH) 5*16kB (MH) 3*32kB (MEH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10468kB [ 1714.389677] Node 0 DMA32: 438*4kB (ME) 2468*8kB (UME) 422*16kB (UME) 55*32kB (UME) 45*64kB (UM) 1*128kB (M) 3*256kB (M) 0*512kB 1*1024kB (U) 1*2048kB (M) 1*4096kB (U) = 40952kB [ 1714.412985] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1714.429699] Node 1 Normal: 761*4kB (UME) 298*8kB (UMEH) 128*16kB (UMEH) 114*32kB (UMEH) 60*64kB (UMEH) 220*128kB (UM) 18*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 47732kB [ 1714.468487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1714.494933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1714.560118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1714.569118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1714.578971] 610127 total pagecache pages [ 1714.583230] 0 pages in swap cache [ 1714.586718] Swap cache stats: add 0, delete 0, find 0/0 [ 1714.592184] Free swap = 0kB [ 1714.595203] Total swap = 0kB [ 1714.598225] 1965979 pages RAM [ 1714.601400] 0 pages HighMem/MovableOnly [ 1714.605433] 335855 pages reserved [ 1714.608888] 0 pages cma reserved [ 1714.612352] Out of memory: Kill process 25272 (syz-executor.0) score 1007 or sacrifice child [ 1714.621007] Killed process 25272 (syz-executor.0) total-vm:72984kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB 21:03:26 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, 0x0, 0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x27f, 0x4) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) r8 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r10, 0x0) 21:03:26 executing program 5: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) fstatfs(r6, 0x0) 21:03:29 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:03:29 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:03:29 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, 0x0, 0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x27f, 0x4) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) r8 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r10, 0x0) 21:03:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, 0x0, 0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x27f, 0x4) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) r8 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r10, 0x0) 21:03:29 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:03:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r2, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x4305, r3, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:03:46 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:03:47 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:03:47 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, 0x0, 0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x27f, 0x4) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) r8 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r10, 0x0) 21:03:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, 0x0, 0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x27f, 0x4) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) r8 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r10, 0x0) 21:03:51 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:03:51 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, 0x0, 0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x27f, 0x4) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) r8 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r10, 0x0) 21:03:51 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sched_setscheduler(0x0, 0x5, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TCGETA(r1, 0x5405, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r2, 0x0, 0x40) 21:03:51 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:03:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x45, 0x4, 0x100000001}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) 21:03:52 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sched_setscheduler(0x0, 0x5, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TCGETA(r1, 0x5405, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r2, 0x0, 0x40) 21:03:52 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:03:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) 21:03:52 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:03:54 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) [ 1744.581409] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1744.616989] modprobe cpuset=/ mems_allowed=0-1 [ 1744.633721] CPU: 1 PID: 8889 Comm: modprobe Not tainted 4.14.169-syzkaller #0 [ 1744.642147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1744.651508] Call Trace: [ 1744.654112] dump_stack+0x142/0x197 [ 1744.658974] dump_header+0x177/0x6cd [ 1744.662706] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1744.668446] ? ___ratelimit+0x55/0x537 [ 1744.672352] oom_kill_process.cold+0x10/0xadd [ 1744.676868] ? rcu_read_unlock_special+0x895/0xd40 [ 1744.681807] ? lock_downgrade+0x740/0x740 [ 1744.686073] out_of_memory+0x2ee/0x1180 [ 1744.690052] ? lock_acquire+0x16f/0x430 [ 1744.694251] ? oom_killer_disable+0x1d0/0x1d0 [ 1744.698758] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1744.703703] __alloc_pages_slowpath+0x2251/0x2930 [ 1744.708571] ? warn_alloc+0xf0/0xf0 [ 1744.712376] ? __might_sleep+0x93/0xb0 [ 1744.716272] __alloc_pages_nodemask+0x62c/0x7a0 [ 1744.720952] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1744.725982] ? ____cache_alloc_node+0x1be/0x1d0 [ 1744.731271] ? cache_grow_begin+0x335/0x400 [ 1744.735608] cache_grow_begin+0x80/0x400 [ 1744.739681] ? __cpuset_node_allowed+0xff/0x450 [ 1744.744373] fallback_alloc+0x1fd/0x2c0 [ 1744.748375] ____cache_alloc_node+0x1be/0x1d0 [ 1744.752884] kmem_cache_alloc+0x1f3/0x780 [ 1744.757040] ? __do_page_fault+0x4e9/0xb80 [ 1744.761418] getname_flags+0xcb/0x580 [ 1744.765227] getname+0x1a/0x20 [ 1744.768541] do_sys_open+0x1e7/0x430 [ 1744.772262] ? filp_open+0x70/0x70 [ 1744.776781] SyS_open+0x2d/0x40 [ 1744.780067] ? do_sys_open+0x430/0x430 [ 1744.783962] do_syscall_64+0x1e8/0x640 [ 1744.788065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1744.793118] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1744.798315] RIP: 0033:0x7f13d0ff0120 [ 1744.802034] RSP: 002b:00007fff3119fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1744.809749] RAX: ffffffffffffffda RBX: 0000556c71f74240 RCX: 00007f13d0ff0120 [ 1744.817024] RDX: 00007fff3119feac RSI: 0000000000080000 RDI: 00007fff3119fe90 [ 1744.824304] RBP: 00007f13d14c0300 R08: 0000000000000000 R09: 0000556c71f74219 [ 1744.831680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000556c71f6c210 [ 1744.838967] R13: 0000556c71f74210 R14: 0000556c71f6c210 R15: 00007fff3119fe90 [ 1744.862514] Mem-Info: [ 1744.865179] active_anon:769469 inactive_anon:549654 isolated_anon:0 [ 1744.865179] active_file:121 inactive_file:382 isolated_file:64 [ 1744.865179] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1744.865179] slab_reclaimable:21342 slab_unreclaimable:122494 [ 1744.865179] mapped:601823 shmem:610054 pagetables:29682 bounce:0 [ 1744.865179] free:23060 free_pcp:384 free_cma:0 [ 1744.904689] Node 0 active_anon:873388kB inactive_anon:1015456kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1744.938108] Node 1 active_anon:2204488kB inactive_anon:1183160kB active_file:88kB inactive_file:604kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1182168kB dirty:92kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1744.988210] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.016204] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1745.021953] Node 0 DMA32 free:27440kB min:36384kB low:45480kB high:54576kB active_anon:872428kB inactive_anon:1011236kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30408kB bounce:0kB free_pcp:660kB local_pcp:12kB free_cma:0kB [ 1745.056198] lowmem_reserve[]: 0 0 0 0 0 [ 1745.060978] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.090095] lowmem_reserve[]: 0 0 0 0 0 [ 1745.094531] Node 1 Normal free:55856kB min:53504kB low:66880kB high:80256kB active_anon:2204556kB inactive_anon:1183156kB active_file:1048kB inactive_file:560kB unevictable:0kB writepending:72kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23232kB pagetables:88384kB bounce:0kB free_pcp:412kB local_pcp:28kB free_cma:0kB [ 1745.215355] lowmem_reserve[]: 0 0 0 0 0 [ 1745.228989] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1745.267908] Node 0 DMA32: 316*4kB (UME) 1953*8kB (UE) 236*16kB (UE) 22*32kB (UME) 52*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27512kB [ 1745.292808] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1745.315919] Node 1 Normal: 470*4kB (UME) 522*8kB (UMEH) 385*16kB (UMEH) 197*32kB (UMEH) 37*64kB (UMEH) 189*128kB (UM) 24*256kB (M) 3*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 54808kB [ 1745.340169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1745.349197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1745.364176] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1745.376699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1745.391443] 610433 total pagecache pages [ 1745.395696] 0 pages in swap cache [ 1745.399273] Swap cache stats: add 0, delete 0, find 0/0 [ 1745.410576] Free swap = 0kB [ 1745.413924] Total swap = 0kB [ 1745.417057] 1965979 pages RAM [ 1745.425252] 0 pages HighMem/MovableOnly [ 1745.429357] 335855 pages reserved [ 1745.436266] 0 pages cma reserved [ 1745.445790] Out of memory: Kill process 8884 (syz-executor.2) score 1007 or sacrifice child [ 1745.472021] Killed process 8884 (syz-executor.2) total-vm:73116kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 1745.556009] oom_reaper: reaped process 8884 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:04:00 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sched_setscheduler(0x0, 0x5, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TCGETA(r1, 0x5405, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r2, 0x0, 0x40) 21:04:00 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:04:00 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:04:00 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:00 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:04:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:00 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) [ 1747.589096] kworker/u4:1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1747.645414] kworker/u4:1 cpuset=/ mems_allowed=0-1 [ 1747.706182] CPU: 0 PID: 22 Comm: kworker/u4:1 Not tainted 4.14.169-syzkaller #0 [ 1747.713676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1747.723054] Workqueue: events_unbound call_usermodehelper_exec_work [ 1747.729575] Call Trace: [ 1747.732166] dump_stack+0x142/0x197 [ 1747.735797] dump_header+0x177/0x6cd [ 1747.739505] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1747.744621] ? ___ratelimit+0x55/0x537 [ 1747.748547] oom_kill_process.cold+0x10/0xadd [ 1747.753046] ? rcu_read_unlock_special+0x895/0xd40 [ 1747.757989] ? lock_downgrade+0x740/0x740 [ 1747.762138] out_of_memory+0x2ee/0x1180 [ 1747.766113] ? lock_acquire+0x16f/0x430 [ 1747.770210] ? oom_killer_disable+0x1d0/0x1d0 [ 1747.774717] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1747.779678] __alloc_pages_slowpath+0x2251/0x2930 [ 1747.784544] ? warn_alloc+0xf0/0xf0 [ 1747.788187] ? __might_sleep+0x93/0xb0 [ 1747.792084] __alloc_pages_nodemask+0x62c/0x7a0 [ 1747.796758] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1747.801891] ? cache_grow_begin+0x335/0x400 [ 1747.806226] cache_grow_begin+0x80/0x400 [ 1747.810312] ? __cpuset_node_allowed+0xff/0x450 [ 1747.815000] fallback_alloc+0x1fd/0x2c0 [ 1747.818969] ____cache_alloc_node+0x1be/0x1d0 [ 1747.823591] kmem_cache_alloc_node+0xe3/0x780 [ 1747.828111] copy_process.part.0+0x17d5/0x6a70 [ 1747.832723] ? __lock_acquire+0x5f7/0x4620 [ 1747.836951] ? __lock_acquire+0x5f7/0x4620 [ 1747.841203] ? trace_hardirqs_on+0x10/0x10 [ 1747.845453] ? umh_complete+0x90/0x90 [ 1747.849450] ? __cleanup_sighand+0x50/0x50 [ 1747.853688] ? kernel_sigaction+0x147/0x210 [ 1747.858018] ? find_held_lock+0x35/0x130 [ 1747.862092] _do_fork+0x19e/0xce0 [ 1747.865545] ? umh_complete+0x90/0x90 [ 1747.869459] ? fork_idle+0x280/0x280 [ 1747.873193] ? trace_hardirqs_on_caller+0x400/0x590 [ 1747.878214] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1747.882730] ? kernel_sigaction+0x147/0x210 [ 1747.887078] ? recalc_sigpending+0xa0/0xa0 [ 1747.891313] ? umh_complete+0x90/0x90 [ 1747.895128] kernel_thread+0x34/0x40 [ 1747.898850] call_usermodehelper_exec_work+0xa4/0x220 [ 1747.904188] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 1747.910350] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1747.915804] process_one_work+0x863/0x1600 [ 1747.920056] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 1747.924761] worker_thread+0x5d9/0x1050 [ 1747.928766] kthread+0x319/0x430 [ 1747.932124] ? process_one_work+0x1600/0x1600 [ 1747.936789] ? kthread_create_on_node+0xd0/0xd0 [ 1747.941466] ret_from_fork+0x24/0x30 [ 1748.007324] Mem-Info: [ 1748.009812] active_anon:769837 inactive_anon:549654 isolated_anon:0 [ 1748.009812] active_file:118 inactive_file:243 isolated_file:30 [ 1748.009812] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1748.009812] slab_reclaimable:21328 slab_unreclaimable:122562 [ 1748.009812] mapped:601539 shmem:610054 pagetables:29750 bounce:0 [ 1748.009812] free:22910 free_pcp:3 free_cma:0 [ 1748.049278] Node 0 active_anon:874184kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1748.103825] Node 1 active_anon:2205232kB inactive_anon:1183160kB active_file:152kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:1181832kB dirty:0kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1748.280722] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1748.316926] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1748.322833] Node 0 DMA32 free:27308kB min:36384kB low:45480kB high:54576kB active_anon:873228kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1748.352874] lowmem_reserve[]: 0 0 0 0 0 [ 1748.357582] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1748.398287] lowmem_reserve[]: 0 0 0 0 0 [ 1748.431356] Node 1 Normal free:52992kB min:53504kB low:66880kB high:80256kB active_anon:2205232kB inactive_anon:1183160kB active_file:848kB inactive_file:1664kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23360kB pagetables:88596kB bounce:0kB free_pcp:972kB local_pcp:292kB free_cma:0kB [ 1748.462887] lowmem_reserve[]: 0 0 0 0 0 [ 1748.467677] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1748.486640] Node 0 DMA32: 311*4kB (UME) 1952*8kB (UE) 233*16kB (UE) 18*32kB (UME) 52*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27308kB [ 1748.503485] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1748.533622] Node 1 Normal: 313*4kB (UME) 295*8kB (UME) 88*16kB (UMEH) 154*32kB (UEH) 45*64kB (UMEH) 247*128kB (UM) 24*256kB (M) 3*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 54172kB [ 1748.560659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1748.579288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1748.622351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1748.665087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1748.674648] 610787 total pagecache pages [ 1748.679454] 0 pages in swap cache [ 1748.683684] Swap cache stats: add 0, delete 0, find 0/0 [ 1748.691020] Free swap = 0kB [ 1748.694607] Total swap = 0kB [ 1748.698383] 1965979 pages RAM [ 1748.702606] 0 pages HighMem/MovableOnly [ 1748.707208] 335855 pages reserved [ 1748.711641] 0 pages cma reserved [ 1748.730132] Out of memory: Kill process 27310 (syz-executor.0) score 1007 or sacrifice child [ 1748.740495] Killed process 27310 (syz-executor.0) total-vm:72984kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB 21:04:03 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:03 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x27f, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:04:03 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:03 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:04:04 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:05 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:06 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:04:06 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x27f, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) [ 1752.991098] syz-executor.1 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1753.068441] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 1753.114775] CPU: 1 PID: 11473 Comm: syz-executor.1 Not tainted 4.14.169-syzkaller #0 [ 1753.122695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1753.132050] Call Trace: [ 1753.134630] dump_stack+0x142/0x197 [ 1753.138265] dump_header+0x177/0x6cd [ 1753.141964] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1753.147066] ? ___ratelimit+0x55/0x537 [ 1753.151083] oom_kill_process.cold+0x10/0xadd [ 1753.155587] ? rcu_read_unlock_special+0x639/0xd40 [ 1753.160522] ? lock_downgrade+0x740/0x740 [ 1753.164682] out_of_memory+0x2ee/0x1180 [ 1753.168660] ? lock_acquire+0x16f/0x430 [ 1753.172630] ? oom_killer_disable+0x1d0/0x1d0 [ 1753.177113] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1753.182043] __alloc_pages_slowpath+0x2251/0x2930 [ 1753.186878] ? kasan_kmalloc+0xce/0xf0 [ 1753.190764] ? warn_alloc+0xf0/0xf0 [ 1753.194392] ? __might_sleep+0x93/0xb0 [ 1753.198264] __alloc_pages_nodemask+0x62c/0x7a0 [ 1753.202921] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1753.207920] ? rcu_read_lock_sched_held+0x110/0x130 [ 1753.212938] ? kasan_unpoison_shadow+0x35/0x50 [ 1753.217532] alloc_pages_current+0xec/0x1e0 [ 1753.221843] __vmalloc_node_range+0x3e9/0x6a0 [ 1753.226475] vzalloc+0x46/0x50 [ 1753.229659] ? alloc_counters.isra.0+0x48/0x90 [ 1753.234243] alloc_counters.isra.0+0x48/0x90 [ 1753.238661] do_ip6t_get_ctl+0x439/0x820 [ 1753.242809] ? save_trace+0x290/0x290 [ 1753.246614] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1753.251601] ? alloc_counters.isra.0+0x90/0x90 [ 1753.256207] ? find_held_lock+0x35/0x130 [ 1753.260277] ? wait_for_completion+0x420/0x420 [ 1753.264996] ? mutex_unlock+0xd/0x10 [ 1753.268765] ? nf_sockopt_find.constprop.0+0x1b7/0x230 [ 1753.274053] nf_getsockopt+0x6a/0xc0 [ 1753.277887] ipv6_getsockopt+0x182/0x1f0 [ 1753.281967] ? do_ipv6_getsockopt.isra.0+0x2040/0x2040 [ 1753.287249] tcp_getsockopt+0x84/0xd0 [ 1753.291058] sock_common_getsockopt+0x94/0xd0 [ 1753.295547] SyS_getsockopt+0x126/0x1e0 [ 1753.299529] ? SyS_setsockopt+0x210/0x210 [ 1753.303675] ? do_syscall_64+0x53/0x640 [ 1753.307640] ? SyS_setsockopt+0x210/0x210 [ 1753.311896] do_syscall_64+0x1e8/0x640 [ 1753.315788] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1753.320668] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1753.325933] RIP: 0033:0x45deaa [ 1753.329137] RSP: 002b:00007fffb69f59a8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 1753.336855] RAX: ffffffffffffffda RBX: 00007fffb69f59d0 RCX: 000000000045deaa [ 1753.344156] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 1753.351559] RBP: 000000000071bcc0 R08: 00007fffb69f59cc R09: 0000000000004000 [ 1753.358841] R10: 00007fffb69f5ad0 R11: 0000000000000212 R12: 0000000000000003 [ 1753.366119] R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000719b00 [ 1753.555151] Mem-Info: [ 1753.557732] active_anon:772602 inactive_anon:549652 isolated_anon:0 [ 1753.557732] active_file:78 inactive_file:126 isolated_file:0 [ 1753.557732] unevictable:0 dirty:24 writeback:1 unstable:0 [ 1753.557732] slab_reclaimable:21338 slab_unreclaimable:122154 [ 1753.557732] mapped:601479 shmem:610054 pagetables:29802 bounce:0 [ 1753.557732] free:20655 free_pcp:10 free_cma:0 [ 1753.601755] Node 0 active_anon:874220kB inactive_anon:1015456kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223628kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1753.691892] Node 1 active_anon:2216188kB inactive_anon:1183152kB active_file:84kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:1181688kB dirty:96kB writeback:4kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1753.726198] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1753.823831] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1753.828972] Node 0 DMA32 free:27412kB min:36384kB low:45480kB high:54576kB active_anon:873264kB inactive_anon:1011236kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1753.871467] lowmem_reserve[]: 0 0 0 0 0 [ 1753.875506] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1753.908945] lowmem_reserve[]: 0 0 0 0 0 [ 1753.913031] Node 1 Normal free:46032kB min:53504kB low:66880kB high:80256kB active_anon:2216188kB inactive_anon:1183152kB active_file:500kB inactive_file:188kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23360kB pagetables:88792kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 1753.955579] lowmem_reserve[]: 0 0 0 0 0 [ 1753.959670] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1753.989604] Node 0 DMA32: 302*4kB (UME) 1952*8kB (UE) 242*16kB (UME) 18*32kB (UME) 52*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27416kB [ 1754.012651] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1754.028283] Node 1 Normal: 1164*4kB (UME) 467*8kB (UMEH) 105*16kB (UMEH) 161*32kB (UMEH) 38*64kB (UEH) 147*128kB (UM) 24*256kB (M) 3*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 46200kB [ 1754.048228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1754.057240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1754.065951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1754.076813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1754.085564] 610085 total pagecache pages [ 1754.089643] 0 pages in swap cache [ 1754.100096] Swap cache stats: add 0, delete 0, find 0/0 [ 1754.105476] Free swap = 0kB [ 1754.108490] Total swap = 0kB [ 1754.117862] 1965979 pages RAM [ 1754.121047] 0 pages HighMem/MovableOnly [ 1754.125020] 335855 pages reserved [ 1754.128470] 0 pages cma reserved [ 1754.137970] Out of memory: Kill process 27356 (syz-executor.0) score 1007 or sacrifice child [ 1754.203955] Killed process 27356 (syz-executor.0) total-vm:72984kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB [ 1754.407791] oom_reaper: reaped process 27356 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:04:08 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:04:09 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:09 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:04:09 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) [ 1757.231588] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 1757.316914] udevd cpuset=/ mems_allowed=0-1 [ 1757.336411] CPU: 1 PID: 9011 Comm: udevd Not tainted 4.14.169-syzkaller #0 [ 1757.343567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1757.352933] Call Trace: [ 1757.355557] dump_stack+0x142/0x197 [ 1757.359214] dump_header+0x177/0x6cd [ 1757.362934] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1757.368045] ? ___ratelimit+0x55/0x537 [ 1757.371943] oom_kill_process.cold+0x10/0xadd [ 1757.376443] ? rcu_read_unlock_special+0x895/0xd40 [ 1757.381386] ? lock_downgrade+0x740/0x740 [ 1757.385641] out_of_memory+0x2ee/0x1180 [ 1757.390312] ? lock_acquire+0x16f/0x430 [ 1757.394311] ? oom_killer_disable+0x1d0/0x1d0 [ 1757.398811] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1757.403748] __alloc_pages_slowpath+0x2251/0x2930 [ 1757.408639] ? warn_alloc+0xf0/0xf0 [ 1757.412304] ? __might_sleep+0x93/0xb0 [ 1757.416193] __alloc_pages_nodemask+0x62c/0x7a0 [ 1757.420974] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1757.426294] ? ____cache_alloc_node+0x1be/0x1d0 [ 1757.430969] ? cache_grow_begin+0x335/0x400 [ 1757.435293] cache_grow_begin+0x80/0x400 [ 1757.439372] ? __cpuset_node_allowed+0xff/0x450 [ 1757.444062] fallback_alloc+0x1fd/0x2c0 [ 1757.448040] ____cache_alloc_node+0x1be/0x1d0 [ 1757.452533] kmem_cache_alloc+0x1f3/0x780 [ 1757.456695] getname_flags+0xcb/0x580 [ 1757.460487] getname+0x1a/0x20 [ 1757.463684] SyS_execve+0x1f/0x50 [ 1757.467147] ? setup_new_exec+0x790/0x790 [ 1757.471306] do_syscall_64+0x1e8/0x640 [ 1757.475186] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1757.480905] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1757.486096] RIP: 0033:0x7fb984377207 [ 1757.489820] RSP: 002b:00007ffcd9795628 EFLAGS: 00000206 ORIG_RAX: 000000000000003b [ 1757.497546] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fb984377207 [ 1757.504835] RDX: 0000000001af2130 RSI: 00007ffcd9795720 RDI: 00007ffcd9796730 [ 1757.512106] RBP: 0000000000625500 R08: 000000000000217a R09: 000000000000217a [ 1757.519390] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000001af2130 [ 1757.526781] R13: 0000000000000007 R14: 0000000001aa2030 R15: 0000000000000005 [ 1757.541560] Mem-Info: [ 1757.550101] active_anon:772308 inactive_anon:549653 isolated_anon:0 [ 1757.550101] active_file:302 inactive_file:315 isolated_file:76 [ 1757.550101] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1757.550101] slab_reclaimable:21365 slab_unreclaimable:122483 [ 1757.550101] mapped:601846 shmem:610054 pagetables:29829 bounce:0 [ 1757.550101] free:20073 free_pcp:1 free_cma:0 [ 1757.674903] Node 0 active_anon:874240kB inactive_anon:1015456kB active_file:64kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223684kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1757.746343] Node 1 active_anon:2214992kB inactive_anon:1183156kB active_file:248kB inactive_file:316kB unevictable:0kB isolated(anon):0kB isolated(file):184kB mapped:1182000kB dirty:72kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1757.775483] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1757.830142] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1757.835334] Node 0 DMA32 free:27308kB min:36384kB low:45480kB high:54576kB active_anon:873280kB inactive_anon:1011236kB active_file:44kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30408kB bounce:0kB free_pcp:20kB local_pcp:16kB free_cma:0kB [ 1757.871542] lowmem_reserve[]: 0 0 0 0 0 [ 1757.875619] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1757.901243] lowmem_reserve[]: 0 0 0 0 0 [ 1757.905257] Node 1 Normal free:45184kB min:53504kB low:66880kB high:80256kB active_anon:2214972kB inactive_anon:1183156kB active_file:544kB inactive_file:424kB unevictable:0kB writepending:100kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23488kB pagetables:88920kB bounce:0kB free_pcp:88kB local_pcp:0kB free_cma:0kB [ 1757.966908] lowmem_reserve[]: 0 0 0 0 0 [ 1758.050133] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1758.073574] Node 0 DMA32: 300*4kB (UME) 1952*8kB (UME) 243*16kB (UME) 18*32kB (UME) 52*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27424kB [ 1758.090529] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1758.101375] Node 1 Normal: 1251*4kB (UME) 308*8kB (UME) 56*16kB (UME) 153*32kB (UME) 36*64kB (UME) 149*128kB (UM) 27*256kB (M) 5*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 46156kB [ 1758.117817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1758.126779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1758.139541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1758.169745] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1758.286419] 610083 total pagecache pages [ 1758.321238] 0 pages in swap cache [ 1758.324730] Swap cache stats: add 0, delete 0, find 0/0 [ 1758.384963] Free swap = 0kB [ 1758.388044] Total swap = 0kB [ 1758.430144] 1965979 pages RAM [ 1758.433420] 0 pages HighMem/MovableOnly [ 1758.437402] 335855 pages reserved [ 1758.536942] 0 pages cma reserved [ 1758.563126] Out of memory: Kill process 27394 (syz-executor.0) score 1007 or sacrifice child [ 1758.607642] Killed process 27394 (syz-executor.0) total-vm:72984kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB [ 1758.897344] oom_reaper: reaped process 27394 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:04:13 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:04:13 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) 21:04:13 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x27f, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:04:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:14 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) [ 1760.424356] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1760.469273] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1760.531824] CPU: 0 PID: 31766 Comm: syz-executor.3 Not tainted 4.14.169-syzkaller #0 [ 1760.539892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1760.549353] Call Trace: [ 1760.551961] dump_stack+0x142/0x197 [ 1760.555738] dump_header+0x177/0x6cd [ 1760.559470] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1760.564586] ? ___ratelimit+0x55/0x537 [ 1760.568515] oom_kill_process.cold+0x10/0xadd [ 1760.573025] ? rcu_read_unlock_special+0x895/0xd40 [ 1760.577970] ? lock_downgrade+0x740/0x740 [ 1760.582140] out_of_memory+0x2ee/0x1180 [ 1760.586121] ? lock_acquire+0x16f/0x430 [ 1760.590214] ? oom_killer_disable+0x1d0/0x1d0 [ 1760.594721] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1760.599682] __alloc_pages_slowpath+0x2251/0x2930 [ 1760.604556] ? warn_alloc+0xf0/0xf0 [ 1760.608319] ? __might_sleep+0x93/0xb0 [ 1760.612217] __alloc_pages_nodemask+0x62c/0x7a0 [ 1760.616902] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1760.621931] ? rcu_read_lock_sched_held+0x110/0x130 [ 1760.626965] copy_process.part.0+0x26a/0x6a70 [ 1760.631513] ? trace_hardirqs_on+0x10/0x10 [ 1760.635771] ? save_trace+0x290/0x290 [ 1760.639593] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1760.644534] ? __might_fault+0x110/0x1d0 [ 1760.648617] ? find_held_lock+0x35/0x130 [ 1760.652699] ? __cleanup_sighand+0x50/0x50 [ 1760.656950] ? lock_downgrade+0x740/0x740 [ 1760.661119] _do_fork+0x19e/0xce0 [ 1760.665112] ? fork_idle+0x280/0x280 [ 1760.668833] ? put_timespec64+0xb4/0x100 [ 1760.673191] ? nsecs_to_jiffies+0x30/0x30 [ 1760.677357] ? SyS_clock_gettime+0xf8/0x180 [ 1760.681693] SyS_clone+0x37/0x50 [ 1760.685170] ? sys_vfork+0x30/0x30 [ 1760.688709] do_syscall_64+0x1e8/0x640 [ 1760.692704] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1760.697573] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1760.702753] RIP: 0033:0x45996a [ 1760.705939] RSP: 002b:00007ffdd0b8fcf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1760.713670] RAX: ffffffffffffffda RBX: 00007ffdd0b8fcf0 RCX: 000000000045996a [ 1760.720937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1760.728222] RBP: 00007ffdd0b8fd30 R08: 0000000000000001 R09: 000000000140d940 [ 1760.735635] R10: 000000000140dc10 R11: 0000000000000246 R12: 0000000000000001 [ 1760.742907] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdd0b8fd80 [ 1760.796266] Mem-Info: [ 1760.798784] active_anon:772247 inactive_anon:549654 isolated_anon:0 [ 1760.798784] active_file:150 inactive_file:152 isolated_file:8 [ 1760.798784] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1760.798784] slab_reclaimable:21390 slab_unreclaimable:122405 [ 1760.798784] mapped:601507 shmem:610054 pagetables:29830 bounce:0 [ 1760.798784] free:20574 free_pcp:2 free_cma:0 [ 1760.844724] Node 0 active_anon:874348kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1760.948613] Node 1 active_anon:2214640kB inactive_anon:1183160kB active_file:128kB inactive_file:164kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:1181604kB dirty:0kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1760.988065] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1761.029371] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1761.036290] Node 0 DMA32 free:27244kB min:36384kB low:45480kB high:54576kB active_anon:873464kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30408kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1761.073479] lowmem_reserve[]: 0 0 0 0 0 [ 1761.077534] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1761.107963] lowmem_reserve[]: 0 0 0 0 0 [ 1761.126119] Node 1 Normal free:46028kB min:53504kB low:66880kB high:80256kB active_anon:2214732kB inactive_anon:1183152kB active_file:48kB inactive_file:68kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23392kB pagetables:88992kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 1761.180277] lowmem_reserve[]: 0 0 0 0 0 [ 1761.184348] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1761.223644] Node 0 DMA32: 284*4kB (UE) 1952*8kB (UME) 241*16kB (UE) 17*32kB (UE) 52*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27296kB [ 1761.241289] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1761.252406] Node 1 Normal: 925*4kB (UME) 433*8kB (UME) 71*16kB (UME) 143*32kB (UMEH) 35*64kB (UE) 153*128kB (UM) 31*256kB (M) 7*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 46220kB [ 1761.269691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1761.278741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1761.289569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1761.306342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1761.317165] 610097 total pagecache pages [ 1761.330110] 0 pages in swap cache [ 1761.333608] Swap cache stats: add 0, delete 0, find 0/0 [ 1761.338977] Free swap = 0kB [ 1761.342550] Total swap = 0kB [ 1761.345581] 1965979 pages RAM [ 1761.348688] 0 pages HighMem/MovableOnly [ 1761.352712] 335855 pages reserved [ 1761.356157] 0 pages cma reserved [ 1761.359528] Out of memory: Kill process 27671 (syz-executor.0) score 1007 or sacrifice child [ 1761.368297] Killed process 27671 (syz-executor.0) total-vm:72984kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB [ 1761.510981] oom_reaper: reaped process 27671 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:04:14 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:16 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:16 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:04:16 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) [ 1763.448554] syz-executor.0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1763.487704] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 1763.505012] CPU: 1 PID: 9035 Comm: syz-executor.0 Not tainted 4.14.169-syzkaller #0 [ 1763.512839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1763.522303] Call Trace: [ 1763.524916] dump_stack+0x142/0x197 [ 1763.528580] dump_header+0x177/0x6cd [ 1763.532300] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1763.537540] ? ___ratelimit+0x55/0x537 [ 1763.541432] oom_kill_process.cold+0x10/0xadd [ 1763.545946] ? rcu_read_unlock_special+0x895/0xd40 [ 1763.551158] ? lock_downgrade+0x740/0x740 [ 1763.555305] out_of_memory+0x2ee/0x1180 [ 1763.559296] ? lock_acquire+0x16f/0x430 [ 1763.563284] ? oom_killer_disable+0x1d0/0x1d0 [ 1763.567789] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1763.572838] __alloc_pages_slowpath+0x2251/0x2930 [ 1763.577715] ? warn_alloc+0xf0/0xf0 [ 1763.581361] ? __might_sleep+0x93/0xb0 [ 1763.585391] __alloc_pages_nodemask+0x62c/0x7a0 [ 1763.590240] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1763.595278] ? rcu_read_lock_sched_held+0x110/0x130 [ 1763.600350] ? check_preemption_disabled+0x3c/0x250 [ 1763.605612] copy_process.part.0+0x26a/0x6a70 [ 1763.610111] ? __handle_mm_fault+0x1bc2/0x33d0 [ 1763.614714] ? lock_downgrade+0x740/0x740 [ 1763.618872] ? pud_val+0xe0/0xe0 [ 1763.622240] ? do_raw_spin_unlock+0x174/0x260 [ 1763.626757] ? _raw_spin_unlock+0x2d/0x50 [ 1763.630903] ? __cleanup_sighand+0x50/0x50 [ 1763.635140] ? __do_page_fault+0x4e9/0xb80 [ 1763.639371] ? find_held_lock+0x35/0x130 [ 1763.644306] _do_fork+0x19e/0xce0 [ 1763.647808] ? fork_idle+0x280/0x280 [ 1763.651533] ? up_read+0x1a/0x40 [ 1763.654901] ? __do_page_fault+0x358/0xb80 [ 1763.659135] ? mprotect_fixup+0x920/0x920 [ 1763.663284] SyS_clone+0x37/0x50 [ 1763.666649] ? sys_vfork+0x30/0x30 [ 1763.670304] do_syscall_64+0x1e8/0x640 [ 1763.674322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1763.679163] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1763.684347] RIP: 0033:0x45dd69 [ 1763.687534] RSP: 002b:00007ffe29379248 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1763.695245] RAX: ffffffffffffffda RBX: 00007fa1750ec700 RCX: 000000000045dd69 [ 1763.702617] RDX: 00007fa1750ec9d0 RSI: 00007fa1750ebdb0 RDI: 00000000003d0f00 [ 1763.709981] RBP: 00007ffe29379460 R08: 00007fa1750ec700 R09: 00007fa1750ec700 [ 1763.717272] R10: 00007fa1750ec9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1763.724648] R13: 00007ffe293792ff R14: 00007fa1750ec9c0 R15: 000000000075bfd4 [ 1764.373811] Mem-Info: [ 1764.387268] active_anon:772365 inactive_anon:549651 isolated_anon:0 [ 1764.387268] active_file:175 inactive_file:169 isolated_file:21 [ 1764.387268] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1764.387268] slab_reclaimable:21412 slab_unreclaimable:122239 [ 1764.387268] mapped:601583 shmem:610054 pagetables:29872 bounce:0 [ 1764.387268] free:20430 free_pcp:64 free_cma:0 [ 1764.455355] Node 0 active_anon:874440kB inactive_anon:1015456kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1764.496746] Node 1 active_anon:2215020kB inactive_anon:1183148kB active_file:504kB inactive_file:556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1182208kB dirty:28kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1764.590277] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1764.648144] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1764.669031] Node 0 DMA32 free:27276kB min:36384kB low:45480kB high:54576kB active_anon:873480kB inactive_anon:1011236kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1764.729865] lowmem_reserve[]: 0 0 0 0 0 [ 1764.734254] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1764.766693] lowmem_reserve[]: 0 0 0 0 0 [ 1764.771694] Node 1 Normal free:45092kB min:53504kB low:66880kB high:80256kB active_anon:2215044kB inactive_anon:1183148kB active_file:204kB inactive_file:20kB unevictable:0kB writepending:128kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23616kB pagetables:89072kB bounce:0kB free_pcp:512kB local_pcp:88kB free_cma:0kB [ 1764.807656] lowmem_reserve[]: 0 0 0 0 0 [ 1764.811758] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1764.838212] Node 0 DMA32: 285*4kB (UE) 1952*8kB (UME) 241*16kB (UE) 17*32kB (UE) 52*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27300kB [ 1764.869017] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1764.885603] Node 1 Normal: 771*4kB (UME) 335*8kB (UME) 76*16kB (UME) 154*32kB (UME) 45*64kB (UME) 154*128kB (UM) 31*256kB (M) 7*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 46020kB [ 1764.906257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1764.916193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1764.930475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1764.939347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1764.954422] 610108 total pagecache pages [ 1764.958525] 0 pages in swap cache [ 1764.963841] Swap cache stats: add 0, delete 0, find 0/0 [ 1764.969263] Free swap = 0kB [ 1764.976027] Total swap = 0kB [ 1764.979183] 1965979 pages RAM [ 1764.995046] 0 pages HighMem/MovableOnly [ 1764.999168] 335855 pages reserved [ 1765.004266] 0 pages cma reserved [ 1765.007657] Out of memory: Kill process 27890 (syz-executor.0) score 1007 or sacrifice child [ 1765.019608] Killed process 27890 (syz-executor.0) total-vm:72984kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB 21:04:19 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:19 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:04:19 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) [ 1766.732090] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1766.767785] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1766.776445] CPU: 1 PID: 7393 Comm: syz-executor.4 Not tainted 4.14.169-syzkaller #0 [ 1766.784268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1766.796609] Call Trace: [ 1766.799218] dump_stack+0x142/0x197 [ 1766.802852] dump_header+0x177/0x6cd [ 1766.806569] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1766.811816] ? ___ratelimit+0x55/0x537 [ 1766.815705] oom_kill_process.cold+0x10/0xadd [ 1766.820229] ? rcu_read_unlock_special+0x895/0xd40 [ 1766.825182] ? lock_downgrade+0x740/0x740 [ 1766.829626] out_of_memory+0x2ee/0x1180 [ 1766.833733] ? lock_acquire+0x16f/0x430 [ 1766.837719] ? oom_killer_disable+0x1d0/0x1d0 [ 1766.842221] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1766.847161] __alloc_pages_slowpath+0x2251/0x2930 [ 1766.852005] ? warn_alloc+0xf0/0xf0 [ 1766.855856] ? __might_sleep+0x93/0xb0 [ 1766.859758] __alloc_pages_nodemask+0x62c/0x7a0 [ 1766.864440] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1766.869469] ? rcu_read_lock_sched_held+0x110/0x130 [ 1766.874507] copy_process.part.0+0x26a/0x6a70 [ 1766.879008] ? trace_hardirqs_on+0x10/0x10 [ 1766.883235] ? save_trace+0x290/0x290 [ 1766.887021] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1766.891976] ? __might_fault+0x110/0x1d0 [ 1766.896027] ? find_held_lock+0x35/0x130 [ 1766.900085] ? __cleanup_sighand+0x50/0x50 [ 1766.904329] ? lock_downgrade+0x740/0x740 [ 1766.908472] _do_fork+0x19e/0xce0 [ 1766.911917] ? fork_idle+0x280/0x280 [ 1766.915637] ? put_timespec64+0xb4/0x100 [ 1766.919711] ? nsecs_to_jiffies+0x30/0x30 [ 1766.923868] ? SyS_clock_gettime+0xf8/0x180 [ 1766.928181] SyS_clone+0x37/0x50 [ 1766.932496] ? sys_vfork+0x30/0x30 [ 1766.936041] do_syscall_64+0x1e8/0x640 [ 1766.939974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1766.944821] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1766.950009] RIP: 0033:0x45996a [ 1766.953204] RSP: 002b:00007ffdb1dd3470 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1766.960934] RAX: ffffffffffffffda RBX: 00007ffdb1dd3470 RCX: 000000000045996a [ 1766.968208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1766.975479] RBP: 00007ffdb1dd34b0 R08: 0000000000000001 R09: 0000000000ba3940 [ 1766.982773] R10: 0000000000ba3c10 R11: 0000000000000246 R12: 0000000000000001 [ 1766.990041] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdb1dd3500 [ 1767.006265] Mem-Info: [ 1767.008726] active_anon:772359 inactive_anon:549653 isolated_anon:0 [ 1767.008726] active_file:106 inactive_file:159 isolated_file:0 [ 1767.008726] unevictable:0 dirty:2 writeback:15 unstable:0 [ 1767.008726] slab_reclaimable:21466 slab_unreclaimable:122215 [ 1767.008726] mapped:601521 shmem:610054 pagetables:29921 bounce:0 [ 1767.008726] free:20593 free_pcp:55 free_cma:0 [ 1767.048579] Node 0 active_anon:874448kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1767.085625] Node 1 active_anon:2205588kB inactive_anon:1183156kB active_file:360kB inactive_file:608kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:1182268kB dirty:8kB writeback:60kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1767.119822] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1767.154941] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1767.163590] Node 0 DMA32 free:27400kB min:36384kB low:45480kB high:54576kB active_anon:873488kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30408kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1767.198111] lowmem_reserve[]: 0 0 0 0 0 [ 1767.247764] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1767.301414] lowmem_reserve[]: 0 0 0 0 0 [ 1767.306166] Node 1 Normal free:60608kB min:53504kB low:66880kB high:80256kB active_anon:2198596kB inactive_anon:1183156kB active_file:332kB inactive_file:576kB unevictable:0kB writepending:60kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23456kB pagetables:89080kB bounce:0kB free_pcp:708kB local_pcp:412kB free_cma:0kB [ 1767.417600] lowmem_reserve[]: 0 0 0 0 0 [ 1767.423772] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1767.440982] Node 0 DMA32: 284*4kB (UE) 1955*8kB (UME) 246*16kB (UE) 17*32kB (UE) 52*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27400kB [ 1767.458007] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1767.471436] Node 1 Normal: 212*4kB (UME) 523*8kB (UMEH) 285*16kB (UMEH) 294*32kB (UME) 92*64kB (UME) 160*128kB (UM) 34*256kB (M) 10*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 59192kB 21:04:21 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:21 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:21 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:21 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) 21:04:21 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) [ 1767.650146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.695158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1767.704538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.716623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1767.763951] 611795 total pagecache pages [ 1767.796604] 0 pages in swap cache [ 1767.829572] Swap cache stats: add 0, delete 0, find 0/0 [ 1767.866603] Free swap = 0kB [ 1767.895135] Total swap = 0kB [ 1767.898339] 1965979 pages RAM [ 1767.921800] 0 pages HighMem/MovableOnly [ 1767.946871] 335855 pages reserved [ 1767.964065] 0 pages cma reserved [ 1767.981335] Out of memory: Kill process 9065 (syz-executor.2) score 1007 or sacrifice child [ 1768.299672] syz-executor.0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1768.315093] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 1768.323036] CPU: 1 PID: 9072 Comm: syz-executor.0 Not tainted 4.14.169-syzkaller #0 [ 1768.330858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1768.344328] Call Trace: [ 1768.346937] dump_stack+0x142/0x197 [ 1768.351071] dump_header+0x177/0x6cd [ 1768.354798] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1768.359911] ? ___ratelimit+0x55/0x537 [ 1768.363812] oom_kill_process.cold+0x10/0xadd [ 1768.368450] ? oom_unkillable_task+0x294/0x390 [ 1768.373169] ? lock_downgrade+0x740/0x740 [ 1768.377363] out_of_memory+0x2ee/0x1180 [ 1768.381389] ? lock_acquire+0x16f/0x430 [ 1768.385416] ? oom_killer_disable+0x1d0/0x1d0 [ 1768.389926] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1768.394869] __alloc_pages_slowpath+0x2251/0x2930 [ 1768.399734] ? warn_alloc+0xf0/0xf0 [ 1768.403378] ? __might_sleep+0x93/0xb0 [ 1768.407273] __alloc_pages_nodemask+0x62c/0x7a0 [ 1768.412055] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1768.417180] ? rcu_read_lock_sched_held+0x110/0x130 [ 1768.422206] ? check_preemption_disabled+0x3c/0x250 [ 1768.427331] copy_process.part.0+0x26a/0x6a70 [ 1768.431958] ? __handle_mm_fault+0x1bc2/0x33d0 [ 1768.437346] ? lock_downgrade+0x740/0x740 [ 1768.441628] ? pud_val+0xe0/0xe0 [ 1768.445015] ? do_raw_spin_unlock+0x174/0x260 [ 1768.449529] ? _raw_spin_unlock+0x2d/0x50 [ 1768.453690] ? __cleanup_sighand+0x50/0x50 [ 1768.457931] ? __do_page_fault+0x4e9/0xb80 [ 1768.462174] ? find_held_lock+0x35/0x130 [ 1768.466272] _do_fork+0x19e/0xce0 [ 1768.469737] ? fork_idle+0x280/0x280 [ 1768.473476] ? up_read+0x1a/0x40 [ 1768.476854] ? __do_page_fault+0x358/0xb80 [ 1768.481095] ? mprotect_fixup+0x920/0x920 [ 1768.485273] SyS_clone+0x37/0x50 [ 1768.488644] ? sys_vfork+0x30/0x30 [ 1768.492192] do_syscall_64+0x1e8/0x640 [ 1768.496189] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1768.501042] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1768.506237] RIP: 0033:0x45dd69 [ 1768.509424] RSP: 002b:00007ffe29379248 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1768.517260] RAX: ffffffffffffffda RBX: 00007fa17510d700 RCX: 000000000045dd69 [ 1768.524538] RDX: 00007fa17510d9d0 RSI: 00007fa17510cdb0 RDI: 00000000003d0f00 [ 1768.531818] RBP: 00007ffe29379460 R08: 00007fa17510d700 R09: 00007fa17510d700 [ 1768.539263] R10: 00007fa17510d9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1768.546540] R13: 00007ffe293792ff R14: 00007fa17510d9c0 R15: 000000000075bf2c [ 1768.686676] Mem-Info: [ 1768.689166] active_anon:772400 inactive_anon:549651 isolated_anon:0 [ 1768.689166] active_file:253 inactive_file:333 isolated_file:57 [ 1768.689166] unevictable:0 dirty:12 writeback:0 unstable:0 [ 1768.689166] slab_reclaimable:21521 slab_unreclaimable:121854 [ 1768.689166] mapped:601797 shmem:610054 pagetables:29944 bounce:0 [ 1768.689166] free:20134 free_pcp:253 free_cma:0 [ 1768.756526] Node 0 active_anon:874444kB inactive_anon:1015456kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1768.791070] Node 1 active_anon:2215156kB inactive_anon:1183148kB active_file:768kB inactive_file:852kB unevictable:0kB isolated(anon):0kB isolated(file):280kB mapped:1182964kB dirty:48kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1768.835445] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1768.874051] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1768.879262] Node 0 DMA32 free:27372kB min:36384kB low:45480kB high:54576kB active_anon:873484kB inactive_anon:1011236kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1768.913340] lowmem_reserve[]: 0 0 0 0 0 [ 1768.917509] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1768.947958] lowmem_reserve[]: 0 0 0 0 0 [ 1768.952746] Node 1 Normal free:44348kB min:53504kB low:66880kB high:80256kB active_anon:2214700kB inactive_anon:1183148kB active_file:1172kB inactive_file:1184kB unevictable:0kB writepending:48kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23616kB pagetables:89360kB bounce:0kB free_pcp:424kB local_pcp:0kB free_cma:0kB [ 1768.987191] lowmem_reserve[]: 0 0 0 0 0 [ 1768.992641] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1769.015072] Node 0 DMA32: 284*4kB (UME) 1954*8kB (UME) 246*16kB (UE) 17*32kB (UE) 52*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27392kB [ 1769.037813] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1769.049230] Node 1 Normal: 585*4kB (UME) 319*8kB (UME) 86*16kB (UMEH) 139*32kB (UME) 34*64kB (UME) 146*128kB (UM) 34*256kB (M) 10*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 45404kB [ 1769.083790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1769.098236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1769.131801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1769.148889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1769.158158] 610212 total pagecache pages [ 1769.168661] 0 pages in swap cache [ 1769.172861] Swap cache stats: add 0, delete 0, find 0/0 [ 1769.190412] Free swap = 0kB [ 1769.193925] Total swap = 0kB [ 1769.197439] 1965979 pages RAM [ 1769.206371] 0 pages HighMem/MovableOnly [ 1769.259452] 335855 pages reserved [ 1769.331219] 0 pages cma reserved [ 1769.334640] Out of memory: Kill process 9073 (syz-executor.2) score 1007 or sacrifice child [ 1769.345066] Killed process 9077 (syz-executor.2) total-vm:73248kB, anon-rss:16572kB, file-rss:34796kB, shmem-rss:0kB [ 1769.432474] oom_reaper: reaped process 9077 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1770.174157] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1770.240071] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1770.245496] CPU: 0 PID: 9091 Comm: syz-executor.2 Not tainted 4.14.169-syzkaller #0 [ 1770.253404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1770.263455] Call Trace: [ 1770.266053] dump_stack+0x142/0x197 [ 1770.269711] dump_header+0x177/0x6cd [ 1770.273442] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1770.278760] ? ___ratelimit+0x55/0x537 [ 1770.282776] oom_kill_process.cold+0x10/0xadd [ 1770.287280] ? rcu_read_unlock_special+0x895/0xd40 [ 1770.292222] ? lock_downgrade+0x740/0x740 [ 1770.296385] out_of_memory+0x2ee/0x1180 [ 1770.300384] ? lock_acquire+0x16f/0x430 [ 1770.304375] ? oom_killer_disable+0x1d0/0x1d0 [ 1770.308978] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1770.313919] __alloc_pages_slowpath+0x2251/0x2930 [ 1770.318781] ? warn_alloc+0xf0/0xf0 [ 1770.322432] ? __might_sleep+0x93/0xb0 [ 1770.326334] __alloc_pages_nodemask+0x62c/0x7a0 [ 1770.331106] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1770.336133] ? ____cache_alloc_node+0x1be/0x1d0 [ 1770.340825] ? cache_grow_begin+0x335/0x400 [ 1770.345182] cache_grow_begin+0x80/0x400 [ 1770.349247] ? __cpuset_node_allowed+0xff/0x450 [ 1770.353961] fallback_alloc+0x1fd/0x2c0 [ 1770.357953] ____cache_alloc_node+0x1be/0x1d0 [ 1770.362459] kmem_cache_alloc+0x1f3/0x780 [ 1770.366614] ? __do_page_fault+0x4e9/0xb80 [ 1770.370985] getname_flags+0xcb/0x580 [ 1770.374796] ? lock_downgrade+0x740/0x740 [ 1770.378954] user_path_at_empty+0x2f/0x50 [ 1770.383141] SyS_chdir+0x86/0x190 [ 1770.386604] ? SyS_access+0x6b0/0x6b0 [ 1770.390498] ? do_syscall_64+0x53/0x640 [ 1770.394759] ? SyS_access+0x6b0/0x6b0 [ 1770.398592] do_syscall_64+0x1e8/0x640 [ 1770.402487] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1770.407342] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1770.414309] RIP: 0033:0x45a987 [ 1770.417498] RSP: 002b:00007ffe4bc92688 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 1770.425208] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a987 [ 1770.432483] RDX: 0000000000000001 RSI: 000000000071de90 RDI: 00007ffe4bc926d0 [ 1770.439915] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000011b4940 [ 1770.448211] R10: 00000000011b4c10 R11: 0000000000000246 R12: 0000000000000000 [ 1770.455485] R13: 00007ffe4bc926c0 R14: 0000000000000000 R15: 00007ffe4bc926d0 [ 1770.750214] Mem-Info: [ 1770.757412] active_anon:772310 inactive_anon:549652 isolated_anon:0 [ 1770.757412] active_file:101 inactive_file:124 isolated_file:75 [ 1770.757412] unevictable:0 dirty:43 writeback:1 unstable:0 [ 1770.757412] slab_reclaimable:21555 slab_unreclaimable:121662 [ 1770.757412] mapped:601463 shmem:610054 pagetables:29926 bounce:0 [ 1770.757412] free:20857 free_pcp:125 free_cma:0 [ 1770.799402] Node 0 active_anon:874448kB inactive_anon:1015456kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1770.828321] Node 1 active_anon:2214856kB inactive_anon:1183152kB active_file:428kB inactive_file:540kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:1182080kB dirty:192kB writeback:4kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1770.868486] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1770.899515] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1770.905199] Node 0 DMA32 free:27372kB min:36384kB low:45480kB high:54576kB active_anon:873508kB inactive_anon:1011236kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1770.941505] lowmem_reserve[]: 0 0 0 0 0 [ 1770.950537] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1770.994756] lowmem_reserve[]: 0 0 0 0 0 [ 1770.998934] Node 1 Normal free:46632kB min:53504kB low:66880kB high:80256kB active_anon:2214680kB inactive_anon:1183152kB active_file:628kB inactive_file:648kB unevictable:0kB writepending:196kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23552kB pagetables:89292kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1771.043831] lowmem_reserve[]: 0 0 0 0 0 [ 1771.053125] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1771.070909] Node 0 DMA32: 282*4kB (UE) 1957*8kB (UME) 247*16kB (UME) 18*32kB (UME) 51*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27392kB [ 1771.087158] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1771.099588] Node 1 Normal: 827*4kB (UME) 447*8kB (UME) 157*16kB (UME) 144*32kB (UMEH) 38*64kB (UME) 131*128kB (UM) 34*256kB (M) 10*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 47028kB [ 1771.118174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1771.127278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1771.137020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1771.146205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1771.155157] 610123 total pagecache pages [ 1771.159403] 0 pages in swap cache [ 1771.178973] Swap cache stats: add 0, delete 0, find 0/0 [ 1771.184581] Free swap = 0kB [ 1771.187718] Total swap = 0kB [ 1771.192484] 1965979 pages RAM [ 1771.195740] 0 pages HighMem/MovableOnly [ 1771.199891] 335855 pages reserved [ 1771.203496] 0 pages cma reserved [ 1771.206978] Out of memory: Kill process 9072 (syz-executor.0) score 1007 or sacrifice child [ 1771.451150] kworker/u4:8 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1771.465251] kworker/u4:8 cpuset=/ mems_allowed=0-1 [ 1771.475852] CPU: 1 PID: 6978 Comm: kworker/u4:8 Not tainted 4.14.169-syzkaller #0 [ 1771.483509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1771.492883] Workqueue: events_unbound call_usermodehelper_exec_work [ 1771.499319] Call Trace: [ 1771.501922] dump_stack+0x142/0x197 [ 1771.505561] dump_header+0x177/0x6cd [ 1771.509347] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1771.514462] ? ___ratelimit+0x55/0x537 [ 1771.518847] oom_kill_process.cold+0x10/0xadd [ 1771.523524] ? rcu_read_unlock_special+0x639/0xd40 [ 1771.528458] ? lock_downgrade+0x740/0x740 [ 1771.532630] out_of_memory+0x2ee/0x1180 [ 1771.536616] ? lock_acquire+0x16f/0x430 [ 1771.540885] ? oom_killer_disable+0x1d0/0x1d0 [ 1771.545391] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1771.551908] __alloc_pages_slowpath+0x2251/0x2930 [ 1771.556770] ? warn_alloc+0xf0/0xf0 [ 1771.560401] ? __might_sleep+0x93/0xb0 [ 1771.564284] __alloc_pages_nodemask+0x62c/0x7a0 [ 1771.568944] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1771.574067] ? cache_grow_begin+0x335/0x400 [ 1771.578378] cache_grow_begin+0x80/0x400 [ 1771.582448] ? __cpuset_node_allowed+0xff/0x450 [ 1771.587117] fallback_alloc+0x1fd/0x2c0 [ 1771.591086] ____cache_alloc_node+0x1be/0x1d0 [ 1771.595873] kmem_cache_alloc_node+0xe3/0x780 [ 1771.600374] copy_process.part.0+0x17d5/0x6a70 [ 1771.604958] ? __lock_acquire+0x5f7/0x4620 [ 1771.609199] ? __lock_acquire+0x5f7/0x4620 [ 1771.613429] ? trace_hardirqs_on+0x10/0x10 [ 1771.617652] ? umh_complete+0x90/0x90 [ 1771.621560] ? __cleanup_sighand+0x50/0x50 [ 1771.625788] ? kernel_sigaction+0x147/0x210 [ 1771.630195] ? find_held_lock+0x35/0x130 [ 1771.634267] _do_fork+0x19e/0xce0 [ 1771.637711] ? umh_complete+0x90/0x90 [ 1771.641512] ? fork_idle+0x280/0x280 [ 1771.645217] ? trace_hardirqs_on_caller+0x400/0x590 [ 1771.650233] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1771.654732] ? kernel_sigaction+0x147/0x210 [ 1771.659043] ? recalc_sigpending+0xa0/0xa0 [ 1771.663265] ? umh_complete+0x90/0x90 [ 1771.667190] kernel_thread+0x34/0x40 [ 1771.670900] call_usermodehelper_exec_work+0xa4/0x220 [ 1771.676540] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 1771.682640] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1771.688099] process_one_work+0x863/0x1600 [ 1771.692350] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 1771.697022] worker_thread+0x5d9/0x1050 [ 1771.701020] kthread+0x319/0x430 [ 1771.704390] ? process_one_work+0x1600/0x1600 [ 1771.708887] ? kthread_create_on_node+0xd0/0xd0 [ 1771.713552] ret_from_fork+0x24/0x30 [ 1771.781038] Mem-Info: [ 1771.783502] active_anon:772356 inactive_anon:549652 isolated_anon:0 [ 1771.783502] active_file:45 inactive_file:27 isolated_file:25 [ 1771.783502] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1771.783502] slab_reclaimable:21555 slab_unreclaimable:121663 [ 1771.783502] mapped:601281 shmem:610054 pagetables:29932 bounce:0 [ 1771.783502] free:21303 free_pcp:2 free_cma:0 [ 1771.818640] Node 0 active_anon:874472kB inactive_anon:1015456kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:4kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1771.848121] Node 1 active_anon:2214952kB inactive_anon:1183152kB active_file:184kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:1181500kB dirty:36kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1771.900879] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1771.943569] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1771.948794] Node 0 DMA32 free:27372kB min:36384kB low:45480kB high:54576kB active_anon:873512kB inactive_anon:1011236kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1771.979534] lowmem_reserve[]: 0 0 0 0 0 [ 1771.983677] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1772.010810] lowmem_reserve[]: 0 0 0 0 0 [ 1772.014836] Node 1 Normal free:47432kB min:53504kB low:66880kB high:80256kB active_anon:2214952kB inactive_anon:1183152kB active_file:308kB inactive_file:0kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23552kB pagetables:89312kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 1772.047621] lowmem_reserve[]: 0 0 0 0 0 [ 1772.051870] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1772.071238] Node 0 DMA32: 283*4kB (UME) 1956*8kB (UE) 247*16kB (UME) 18*32kB (UME) 51*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27388kB [ 1772.107233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1772.155377] Node 1 Normal: 863*4kB (UME) 462*8kB (UME) 168*16kB (UME) 148*32kB (UMEH) 38*64kB (UME) 131*128kB (UM) 34*256kB (M) 10*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 47596kB [ 1772.334909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1772.417988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1772.530126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1772.539010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1772.693625] 610093 total pagecache pages [ 1772.697885] 0 pages in swap cache [ 1772.780987] Swap cache stats: add 0, delete 0, find 0/0 [ 1772.786394] Free swap = 0kB [ 1772.789535] Total swap = 0kB [ 1772.908833] 1965979 pages RAM [ 1772.943654] 0 pages HighMem/MovableOnly [ 1772.947997] 335855 pages reserved [ 1773.031655] 0 pages cma reserved [ 1773.035069] Out of memory: Kill process 9051 (syz-executor.4) score 1007 or sacrifice child [ 1773.146041] Killed process 9051 (syz-executor.4) total-vm:72984kB, anon-rss:16552kB, file-rss:34816kB, shmem-rss:0kB 21:04:23 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:24 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:04:27 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:27 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:04:27 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:27 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r3, 0x0) 21:04:27 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:28 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:04:28 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:28 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r3, 0x0) [ 1775.237165] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1775.300090] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1775.381645] CPU: 1 PID: 31766 Comm: syz-executor.3 Not tainted 4.14.169-syzkaller #0 [ 1775.389684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1775.399132] Call Trace: [ 1775.401736] dump_stack+0x142/0x197 [ 1775.405386] dump_header+0x177/0x6cd [ 1775.409114] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1775.414376] ? ___ratelimit+0x55/0x537 [ 1775.418280] oom_kill_process.cold+0x10/0xadd [ 1775.422785] ? rcu_read_unlock_special+0x895/0xd40 [ 1775.427731] ? lock_downgrade+0x740/0x740 [ 1775.431903] out_of_memory+0x2ee/0x1180 [ 1775.435878] ? lock_acquire+0x16f/0x430 [ 1775.440002] ? oom_killer_disable+0x1d0/0x1d0 [ 1775.445101] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1775.450170] __alloc_pages_slowpath+0x2251/0x2930 [ 1775.455120] ? warn_alloc+0xf0/0xf0 [ 1775.458740] ? __might_sleep+0x93/0xb0 [ 1775.462628] __alloc_pages_nodemask+0x62c/0x7a0 [ 1775.467332] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1775.472343] ? rcu_read_lock_sched_held+0x110/0x130 [ 1775.477380] copy_process.part.0+0x26a/0x6a70 [ 1775.481971] ? trace_hardirqs_on+0x10/0x10 [ 1775.486199] ? save_trace+0x290/0x290 [ 1775.490030] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1775.495079] ? __might_fault+0x110/0x1d0 [ 1775.499131] ? find_held_lock+0x35/0x130 [ 1775.503203] ? __cleanup_sighand+0x50/0x50 [ 1775.507433] ? lock_downgrade+0x740/0x740 [ 1775.511585] _do_fork+0x19e/0xce0 [ 1775.515163] ? fork_idle+0x280/0x280 [ 1775.518884] ? put_timespec64+0xb4/0x100 [ 1775.522952] ? nsecs_to_jiffies+0x30/0x30 [ 1775.527210] ? SyS_clock_gettime+0xf8/0x180 [ 1775.531543] SyS_clone+0x37/0x50 [ 1775.534899] ? sys_vfork+0x30/0x30 [ 1775.538545] do_syscall_64+0x1e8/0x640 [ 1775.542455] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1775.547320] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1775.552513] RIP: 0033:0x45996a [ 1775.555687] RSP: 002b:00007ffdd0b8fcf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1775.563379] RAX: ffffffffffffffda RBX: 00007ffdd0b8fcf0 RCX: 000000000045996a [ 1775.570646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1775.578024] RBP: 00007ffdd0b8fd30 R08: 0000000000000001 R09: 000000000140d940 [ 1775.585931] R10: 000000000140dc10 R11: 0000000000000246 R12: 0000000000000001 [ 1775.593365] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdd0b8fd80 [ 1775.608518] Mem-Info: [ 1775.611269] active_anon:774027 inactive_anon:549653 isolated_anon:0 [ 1775.611269] active_file:93 inactive_file:145 isolated_file:46 [ 1775.611269] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1775.611269] slab_reclaimable:21632 slab_unreclaimable:121537 [ 1775.611269] mapped:601469 shmem:610054 pagetables:29916 bounce:0 [ 1775.611269] free:19319 free_pcp:0 free_cma:0 [ 1775.656499] Node 0 active_anon:874472kB inactive_anon:1015456kB active_file:12kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1775.685510] Node 1 active_anon:2221636kB inactive_anon:1183156kB active_file:360kB inactive_file:464kB unevictable:0kB isolated(anon):0kB isolated(file):140kB mapped:1182052kB dirty:64kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1775.714641] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1775.800956] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1775.806383] Node 0 DMA32 free:27252kB min:36384kB low:45480kB high:54576kB active_anon:873512kB inactive_anon:1011236kB active_file:12kB inactive_file:116kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30408kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1775.836269] lowmem_reserve[]: 0 0 0 0 0 [ 1775.840730] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1775.866686] lowmem_reserve[]: 0 0 0 0 0 [ 1775.871075] Node 1 Normal free:40076kB min:53504kB low:66880kB high:80256kB active_anon:2221172kB inactive_anon:1183156kB active_file:372kB inactive_file:424kB unevictable:0kB writepending:64kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23808kB pagetables:89248kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 1775.901196] lowmem_reserve[]: 0 0 0 0 0 [ 1775.905584] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1775.947585] Node 0 DMA32: 283*4kB (UME) 1956*8kB (UE) 248*16kB (UME) 19*32kB (UME) 49*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27308kB [ 1775.977417] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1775.988880] Node 1 Normal: 194*4kB (UM) 137*8kB (UME) 59*16kB (UME) 149*32kB (UME) 39*64kB (UME) 129*128kB (UM) 35*256kB (M) 10*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 40672kB [ 1776.005312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1776.014424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1776.023483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1776.032583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1776.041454] 610160 total pagecache pages [ 1776.045902] 0 pages in swap cache [ 1776.049563] Swap cache stats: add 0, delete 0, find 0/0 [ 1776.055201] Free swap = 0kB [ 1776.058494] Total swap = 0kB [ 1776.066337] 1965979 pages RAM [ 1776.069707] 0 pages HighMem/MovableOnly [ 1776.074707] 335855 pages reserved [ 1776.078611] 0 pages cma reserved [ 1776.082405] Out of memory: Kill process 9103 (syz-executor.0) score 1007 or sacrifice child [ 1776.434115] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 1776.644815] udevd cpuset=/ mems_allowed=0-1 [ 1776.649208] CPU: 0 PID: 8581 Comm: udevd Not tainted 4.14.169-syzkaller #0 [ 1776.656323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1776.665683] Call Trace: [ 1776.668283] dump_stack+0x142/0x197 [ 1776.672175] dump_header+0x177/0x6cd [ 1776.676017] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1776.681255] ? ___ratelimit+0x55/0x537 [ 1776.685156] oom_kill_process.cold+0x10/0xadd [ 1776.689668] ? rcu_read_unlock_special+0x639/0xd40 [ 1776.694611] ? lock_downgrade+0x740/0x740 [ 1776.698784] out_of_memory+0x2ee/0x1180 [ 1776.702776] ? lock_acquire+0x16f/0x430 [ 1776.706774] ? oom_killer_disable+0x1d0/0x1d0 [ 1776.711278] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1776.716223] __alloc_pages_slowpath+0x2251/0x2930 [ 1776.721268] ? warn_alloc+0xf0/0xf0 [ 1776.724916] ? __might_sleep+0x93/0xb0 [ 1776.728810] __alloc_pages_nodemask+0x62c/0x7a0 [ 1776.733490] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1776.738665] ? ____cache_alloc_node+0x1be/0x1d0 [ 1776.743348] ? cache_grow_begin+0x335/0x400 [ 1776.747684] cache_grow_begin+0x80/0x400 [ 1776.751765] ? __cpuset_node_allowed+0xff/0x450 [ 1776.756485] fallback_alloc+0x1fd/0x2c0 [ 1776.760561] ____cache_alloc_node+0x1be/0x1d0 [ 1776.765075] kmem_cache_alloc+0x1f3/0x780 [ 1776.769240] getname_flags+0xcb/0x580 [ 1776.773076] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 1776.778113] ? mntput_no_expire+0xce/0x850 [ 1776.782368] user_path_at_empty+0x2f/0x50 [ 1776.786593] vfs_statx+0xcd/0x160 [ 1776.790219] ? vfs_statx_fd+0xa0/0xa0 [ 1776.794128] ? rcu_read_lock_sched_held+0x110/0x130 [ 1776.799151] ? kmem_cache_free+0x244/0x2b0 [ 1776.803388] SYSC_newstat+0x95/0x100 [ 1776.807090] ? cp_new_stat+0x5a0/0x5a0 [ 1776.810981] ? do_unlinkat+0x174/0x600 [ 1776.814986] ? do_rmdir+0x390/0x390 [ 1776.818625] ? trace_hardirqs_on+0xd/0x10 [ 1776.822781] ? fsnotify_put_mark+0x336/0x480 [ 1776.827419] ? do_syscall_64+0x53/0x640 [ 1776.831395] ? SyS_fstat+0x30/0x30 [ 1776.834946] SyS_newstat+0x1e/0x30 [ 1776.838534] do_syscall_64+0x1e8/0x640 [ 1776.842417] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1776.847265] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1776.852449] RIP: 0033:0x7fb98439ac65 [ 1776.856155] RSP: 002b:00007ffcd9797f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1776.864859] RAX: ffffffffffffffda RBX: 0000000001aed7d8 RCX: 00007fb98439ac65 [ 1776.872129] RDX: 00007ffcd9797ff0 RSI: 00007ffcd9797ff0 RDI: 00007ffcd9798480 [ 1776.879397] RBP: 0000000001af1ed0 R08: 00007ffcd9798880 R09: 00007ffcd97984a0 [ 1776.886666] R10: 7269762f73656369 R11: 0000000000000246 R12: 0000000001adaa00 [ 1776.894884] R13: 0000000000625500 R14: 0000000001aa2030 R15: 0000000001adaa00 [ 1776.923136] Mem-Info: [ 1776.925597] active_anon:774353 inactive_anon:549653 isolated_anon:0 [ 1776.925597] active_file:22 inactive_file:9 isolated_file:0 [ 1776.925597] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1776.925597] slab_reclaimable:21629 slab_unreclaimable:121494 [ 1776.925597] mapped:601267 shmem:610054 pagetables:29918 bounce:0 [ 1776.925597] free:19380 free_pcp:63 free_cma:0 [ 1776.981852] Node 0 active_anon:874620kB inactive_anon:1015456kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1777.084659] Node 1 active_anon:2222792kB inactive_anon:1183156kB active_file:112kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1181444kB dirty:0kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1777.499990] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1777.898278] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1777.954519] Node 0 DMA32 free:27180kB min:36384kB low:45480kB high:54576kB active_anon:873660kB inactive_anon:1011236kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30408kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 1778.360096] lowmem_reserve[]: 0 0 0 0 0 [ 1778.364154] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.800089] lowmem_reserve[]: 0 0 0 0 0 [ 1778.804337] Node 1 Normal free:39944kB min:53504kB low:66880kB high:80256kB active_anon:2222792kB inactive_anon:1183156kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23616kB pagetables:89256kB bounce:0kB free_pcp:132kB local_pcp:12kB free_cma:0kB [ 1779.279427] lowmem_reserve[]: 0 0 0 0 0 [ 1779.300499] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1779.546100] Node 0 DMA32: 283*4kB (UME) 1956*8kB (UME) 247*16kB (UME) 20*32kB (UME) 47*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27196kB [ 1779.739438] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1779.914336] Node 1 Normal: 32*4kB (UE) 135*8kB (UE) 59*16kB (UE) 148*32kB (UE) 38*64kB (UE) 129*128kB (UM) 35*256kB (M) 10*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 39912kB [ 1780.137764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1780.292586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1780.417999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1780.545480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1780.660089] 610085 total pagecache pages [ 1780.664201] 0 pages in swap cache [ 1780.667649] Swap cache stats: add 0, delete 0, find 0/0 [ 1780.870194] Free swap = 0kB [ 1780.873254] Total swap = 0kB [ 1780.876275] 1965979 pages RAM [ 1780.879378] 0 pages HighMem/MovableOnly [ 1781.058155] 335855 pages reserved [ 1781.143904] 0 pages cma reserved [ 1781.147312] Out of memory: Kill process 9120 (syz-executor.0) score 1007 or sacrifice child [ 1781.286270] Killed process 9120 (syz-executor.0) total-vm:73248kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB [ 1781.556931] oom_reaper: reaped process 9120 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1781.589598] kworker/u4:8 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1781.610628] kworker/u4:8 cpuset=/ mems_allowed=0-1 [ 1781.616197] CPU: 1 PID: 6978 Comm: kworker/u4:8 Not tainted 4.14.169-syzkaller #0 [ 1781.623852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1781.633222] Workqueue: events_unbound call_usermodehelper_exec_work [ 1781.639648] Call Trace: [ 1781.642252] dump_stack+0x142/0x197 [ 1781.645894] dump_header+0x177/0x6cd [ 1781.649612] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1781.654729] ? ___ratelimit+0x55/0x537 [ 1781.658618] oom_kill_process.cold+0x10/0xadd [ 1781.663122] ? rcu_read_unlock_special+0x895/0xd40 [ 1781.668574] ? lock_downgrade+0x740/0x740 [ 1781.672733] out_of_memory+0x2ee/0x1180 [ 1781.676773] ? lock_acquire+0x16f/0x430 [ 1781.680754] ? oom_killer_disable+0x1d0/0x1d0 [ 1781.685255] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1781.690189] __alloc_pages_slowpath+0x2251/0x2930 [ 1781.695038] ? warn_alloc+0xf0/0xf0 [ 1781.698681] ? __might_sleep+0x93/0xb0 [ 1781.702642] __alloc_pages_nodemask+0x62c/0x7a0 [ 1781.707456] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1781.712478] ? rcu_read_lock_sched_held+0x110/0x130 [ 1781.717609] copy_process.part.0+0x26a/0x6a70 [ 1781.722116] ? __lock_acquire+0x5f7/0x4620 [ 1781.726359] ? __lock_acquire+0x5f7/0x4620 [ 1781.730605] ? trace_hardirqs_on+0x10/0x10 [ 1781.734847] ? umh_complete+0x90/0x90 [ 1781.738812] ? __cleanup_sighand+0x50/0x50 [ 1781.743058] ? kernel_sigaction+0x147/0x210 [ 1781.747390] ? find_held_lock+0x35/0x130 [ 1781.751449] _do_fork+0x19e/0xce0 [ 1781.754911] ? umh_complete+0x90/0x90 [ 1781.758748] ? fork_idle+0x280/0x280 [ 1781.762598] ? trace_hardirqs_on_caller+0x400/0x590 [ 1781.767644] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1781.772141] ? kernel_sigaction+0x147/0x210 [ 1781.776457] ? recalc_sigpending+0xa0/0xa0 [ 1781.780696] ? umh_complete+0x90/0x90 [ 1781.784511] kernel_thread+0x34/0x40 [ 1781.788231] call_usermodehelper_exec_work+0xa4/0x220 [ 1781.793428] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 1781.799029] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1781.804487] process_one_work+0x863/0x1600 [ 1781.808730] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 1781.813598] worker_thread+0x5d9/0x1050 [ 1781.817710] kthread+0x319/0x430 [ 1781.821078] ? process_one_work+0x1600/0x1600 [ 1781.825579] ? kthread_create_on_node+0xd0/0xd0 [ 1781.830686] ret_from_fork+0x24/0x30 [ 1781.850579] Mem-Info: [ 1781.853608] active_anon:770551 inactive_anon:549653 isolated_anon:0 [ 1781.853608] active_file:69 inactive_file:65 isolated_file:16 [ 1781.853608] unevictable:0 dirty:0 writeback:7 unstable:0 [ 1781.853608] slab_reclaimable:21625 slab_unreclaimable:121458 [ 1781.853608] mapped:601349 shmem:610054 pagetables:29885 bounce:0 [ 1781.853608] free:22989 free_pcp:218 free_cma:0 [ 1781.894704] Node 0 active_anon:874744kB inactive_anon:1015456kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1781.933675] Node 1 active_anon:2207460kB inactive_anon:1183156kB active_file:180kB inactive_file:448kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:1181572kB dirty:0kB writeback:28kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1781.971618] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1782.004928] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1782.019484] Node 0 DMA32 free:27312kB min:36384kB low:45480kB high:54576kB active_anon:873784kB inactive_anon:1011236kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17504kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1782.054464] lowmem_reserve[]: 0 0 0 0 0 [ 1782.058609] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1782.090389] lowmem_reserve[]: 0 0 0 0 0 [ 1782.094551] Node 1 Normal free:54856kB min:53504kB low:66880kB high:80256kB active_anon:2207460kB inactive_anon:1183156kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23424kB pagetables:89128kB bounce:0kB free_pcp:816kB local_pcp:188kB free_cma:0kB [ 1782.184970] lowmem_reserve[]: 0 0 0 0 0 [ 1782.189047] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1782.250830] Node 0 DMA32: 291*4kB (UME) 1960*8kB (UME) 250*16kB (UME) 21*32kB (UME) 47*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27340kB [ 1782.288584] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1782.304765] Node 1 Normal: 918*4kB (UME) 748*8kB (UME) 280*16kB (UME) 231*32kB (UME) 41*64kB (UME) 129*128kB (UM) 35*256kB (M) 10*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 54744kB [ 1782.325781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1782.335631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1782.351889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1782.367207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1782.376802] 610194 total pagecache pages [ 1782.386588] 0 pages in swap cache [ 1782.394286] Swap cache stats: add 0, delete 0, find 0/0 [ 1782.399693] Free swap = 0kB [ 1782.408581] Total swap = 0kB [ 1782.412104] 1965979 pages RAM [ 1782.415740] 0 pages HighMem/MovableOnly [ 1782.420436] 335855 pages reserved [ 1782.424368] 0 pages cma reserved [ 1782.427747] Out of memory: Kill process 30156 (syz-executor.0) score 1007 or sacrifice child [ 1782.441949] Killed process 30156 (syz-executor.0) total-vm:72984kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB 21:04:37 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:04:37 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:37 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:37 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:04:37 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:37 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:04:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:37 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r3, 0x0) 21:04:37 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:04:37 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:38 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:38 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:04:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:38 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:04:38 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:38 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:38 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:04:38 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:38 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:04:38 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:04:39 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:39 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:39 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:04:39 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:39 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:04:39 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) [ 1785.843457] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1785.920075] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1785.925780] CPU: 1 PID: 7394 Comm: syz-executor.2 Not tainted 4.14.169-syzkaller #0 [ 1785.933680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1785.943244] Call Trace: [ 1785.945848] dump_stack+0x142/0x197 [ 1785.949494] dump_header+0x177/0x6cd [ 1785.953217] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1785.958339] ? ___ratelimit+0x55/0x537 [ 1785.962233] oom_kill_process.cold+0x10/0xadd [ 1785.966728] ? rcu_read_unlock_special+0x895/0xd40 [ 1785.971654] ? lock_downgrade+0x740/0x740 [ 1785.975834] out_of_memory+0x2ee/0x1180 [ 1785.979824] ? lock_acquire+0x16f/0x430 [ 1785.983820] ? oom_killer_disable+0x1d0/0x1d0 [ 1785.988320] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1785.993256] __alloc_pages_slowpath+0x2251/0x2930 [ 1785.998117] ? trace_hardirqs_on_caller+0x400/0x590 [ 1786.003142] ? warn_alloc+0xf0/0xf0 [ 1786.006779] ? __might_sleep+0x93/0xb0 [ 1786.010843] __alloc_pages_nodemask+0x62c/0x7a0 [ 1786.016556] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1786.021576] cache_grow_begin+0x80/0x400 [ 1786.025633] ? __cpuset_node_allowed+0xff/0x450 [ 1786.030305] fallback_alloc+0x1fd/0x2c0 [ 1786.034373] ____cache_alloc_node+0x1be/0x1d0 [ 1786.038871] kmem_cache_alloc+0x1f3/0x780 [ 1786.043016] ? trace_hardirqs_on+0x10/0x10 [ 1786.047237] getname_flags+0xcb/0x580 [ 1786.051042] user_path_at_empty+0x2f/0x50 [ 1786.055318] vfs_statx+0xcd/0x160 [ 1786.059541] ? vfs_statx_fd+0xa0/0xa0 [ 1786.063346] SYSC_newlstat+0x95/0x100 [ 1786.067135] ? SYSC_newstat+0x100/0x100 [ 1786.071099] ? mntput_no_expire+0xfa/0x850 [ 1786.075325] ? SyS_umount+0x173/0x380 [ 1786.079111] ? do_syscall_64+0x53/0x640 [ 1786.083071] ? SyS_newstat+0x30/0x30 [ 1786.086916] SyS_newlstat+0x1e/0x30 [ 1786.090540] do_syscall_64+0x1e8/0x640 [ 1786.094432] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1786.099271] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1786.104447] RIP: 0033:0x45a755 [ 1786.107622] RSP: 002b:00007ffe4bc91598 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1786.115319] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a755 [ 1786.122574] RDX: 00007ffe4bc915b0 RSI: 00007ffe4bc915b0 RDI: 00007ffe4bc91640 [ 1786.129827] RBP: 0000000000000e05 R08: 0000000000000000 R09: 0000000000000011 [ 1786.137092] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffe4bc926d0 [ 1786.144355] R13: 00000000011b5940 R14: 0000000000000000 R15: 00007ffe4bc926d0 [ 1786.242035] Mem-Info: [ 1786.320161] active_anon:768711 inactive_anon:549653 isolated_anon:0 [ 1786.320161] active_file:525 inactive_file:706 isolated_file:61 [ 1786.320161] unevictable:0 dirty:31 writeback:0 unstable:0 [ 1786.320161] slab_reclaimable:21623 slab_unreclaimable:121549 [ 1786.320161] mapped:602142 shmem:610054 pagetables:29939 bounce:0 [ 1786.320161] free:23254 free_pcp:336 free_cma:0 [ 1786.456687] Node 0 active_anon:874492kB inactive_anon:1015456kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1786.530181] Node 1 active_anon:2200568kB inactive_anon:1183152kB active_file:2680kB inactive_file:2092kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:1184900kB dirty:160kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1786.590101] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.657730] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1786.663620] Node 0 DMA32 free:27360kB min:36384kB low:45480kB high:54576kB active_anon:873532kB inactive_anon:1011236kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17568kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.730736] lowmem_reserve[]: 0 0 0 0 0 [ 1786.745151] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.811315] lowmem_reserve[]: 0 0 0 0 0 [ 1786.819967] Node 1 Normal free:56208kB min:53504kB low:66880kB high:80256kB active_anon:2200468kB inactive_anon:1183152kB active_file:2196kB inactive_file:2932kB unevictable:0kB writepending:160kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23584kB pagetables:89512kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1786.861590] lowmem_reserve[]: 0 0 0 0 0 [ 1786.872783] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1786.889648] Node 0 DMA32: 290*4kB (UME) 1967*8kB (UME) 234*16kB (UME) 20*32kB (UME) 51*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27360kB [ 1786.906217] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1786.924051] Node 1 Normal: 134*4kB (UMEH) 235*8kB (UME) 136*16kB (UME) 245*32kB (UME) 134*64kB (UME) 151*128kB (UM) 39*256kB (M) 11*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 55952kB [ 1786.968517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.978391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1786.993507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1787.009043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1787.024702] 611215 total pagecache pages [ 1787.028988] 0 pages in swap cache [ 1787.033644] Swap cache stats: add 0, delete 0, find 0/0 [ 1787.039160] Free swap = 0kB [ 1787.047501] Total swap = 0kB [ 1787.050713] 1965979 pages RAM [ 1787.053956] 0 pages HighMem/MovableOnly [ 1787.058516] 335855 pages reserved [ 1787.076285] 0 pages cma reserved [ 1787.107064] Out of memory: Kill process 9228 (syz-executor.4) score 1007 or sacrifice child [ 1787.154994] Killed process 9228 (syz-executor.4) total-vm:72852kB, anon-rss:16544kB, file-rss:34884kB, shmem-rss:0kB 21:04:41 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) [ 1787.304220] oom_reaper: reaped process 9228 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:04:42 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:04:44 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) [ 1791.331287] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 1791.356949] blkid cpuset=/ mems_allowed=0-1 [ 1791.365725] CPU: 0 PID: 9264 Comm: blkid Not tainted 4.14.169-syzkaller #0 [ 1791.372777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1791.382135] Call Trace: [ 1791.384888] dump_stack+0x142/0x197 [ 1791.388616] dump_header+0x177/0x6cd [ 1791.392341] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1791.397456] ? ___ratelimit+0x55/0x537 [ 1791.401368] oom_kill_process.cold+0x10/0xadd [ 1791.405876] ? rcu_read_unlock_special+0x639/0xd40 [ 1791.410817] ? lock_downgrade+0x740/0x740 [ 1791.415081] out_of_memory+0x2ee/0x1180 [ 1791.419064] ? lock_acquire+0x16f/0x430 [ 1791.423056] ? oom_killer_disable+0x1d0/0x1d0 [ 1791.427559] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1791.432502] __alloc_pages_slowpath+0x2251/0x2930 [ 1791.437370] ? warn_alloc+0xf0/0xf0 [ 1791.440998] ? __might_sleep+0x93/0xb0 [ 1791.444890] __alloc_pages_nodemask+0x62c/0x7a0 [ 1791.449569] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1791.454597] ? ____cache_alloc_node+0x1be/0x1d0 [ 1791.459531] ? cache_grow_begin+0x335/0x400 [ 1791.463864] cache_grow_begin+0x80/0x400 [ 1791.467942] ? __cpuset_node_allowed+0xff/0x450 [ 1791.472607] fallback_alloc+0x1fd/0x2c0 [ 1791.476599] ____cache_alloc_node+0x1be/0x1d0 [ 1791.481100] kmem_cache_alloc+0x1f3/0x780 [ 1791.485252] ? __do_page_fault+0x4e9/0xb80 [ 1791.489583] getname_flags+0xcb/0x580 [ 1791.493504] getname+0x1a/0x20 [ 1791.496720] do_sys_open+0x1e7/0x430 [ 1791.500433] ? filp_open+0x70/0x70 [ 1791.504011] SyS_open+0x2d/0x40 [ 1791.507305] ? do_sys_open+0x430/0x430 [ 1791.511309] do_syscall_64+0x1e8/0x640 [ 1791.515284] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1791.520408] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1791.525629] RIP: 0033:0x7f48e6c6f120 [ 1791.529329] RSP: 002b:00007ffe7a1b65b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1791.537040] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f48e6c6f120 [ 1791.544325] RDX: 00007ffe7a1b6f32 RSI: 0000000000000000 RDI: 00007ffe7a1b6f32 [ 1791.551591] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 1791.558894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000cde030 [ 1791.566174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 1791.778402] Mem-Info: [ 1791.783850] active_anon:769799 inactive_anon:549652 isolated_anon:0 [ 1791.783850] active_file:164 inactive_file:244 isolated_file:14 [ 1791.783850] unevictable:0 dirty:1 writeback:1 unstable:0 [ 1791.783850] slab_reclaimable:21569 slab_unreclaimable:121943 [ 1791.783850] mapped:601630 shmem:610054 pagetables:29970 bounce:0 [ 1791.783850] free:22932 free_pcp:110 free_cma:0 [ 1791.824624] Node 0 active_anon:874488kB inactive_anon:1015456kB active_file:32kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223664kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1791.892389] Node 1 active_anon:2204708kB inactive_anon:1183152kB active_file:716kB inactive_file:956kB unevictable:0kB isolated(anon):0kB isolated(file):152kB mapped:1182756kB dirty:4kB writeback:4kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1791.929149] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.961098] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1791.966746] Node 0 DMA32 free:27244kB min:36384kB low:45480kB high:54576kB active_anon:873528kB inactive_anon:1011236kB active_file:32kB inactive_file:116kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17568kB pagetables:30408kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1792.004152] lowmem_reserve[]: 0 0 0 0 0 [ 1792.008830] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1792.039261] lowmem_reserve[]: 0 0 0 0 0 [ 1792.044066] Node 1 Normal free:56372kB min:53504kB low:66880kB high:80256kB active_anon:2204540kB inactive_anon:1183152kB active_file:552kB inactive_file:32kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23520kB pagetables:89464kB bounce:0kB free_pcp:240kB local_pcp:12kB free_cma:0kB [ 1792.074845] lowmem_reserve[]: 0 0 0 0 0 [ 1792.078995] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1792.095455] Node 0 DMA32: 296*4kB (UME) 1957*8kB (UME) 236*16kB (UME) 20*32kB (UME) 51*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27336kB [ 1792.112323] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1792.153123] Node 1 Normal: 247*4kB (UME) 241*8kB (UME) 88*16kB (UMEH) 230*32kB (UME) 133*64kB (UME) 152*128kB (UM) 39*256kB (M) 11*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 55268kB [ 1792.176387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.186292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.201364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.216290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.228607] 610437 total pagecache pages [ 1792.238173] 0 pages in swap cache [ 1792.300106] Swap cache stats: add 0, delete 0, find 0/0 [ 1792.305597] Free swap = 0kB [ 1792.308626] Total swap = 0kB [ 1792.314111] 1965979 pages RAM [ 1792.317240] 0 pages HighMem/MovableOnly [ 1792.321257] 335855 pages reserved [ 1792.324732] 0 pages cma reserved [ 1792.328104] Out of memory: Kill process 9248 (syz-executor.4) score 1007 or sacrifice child [ 1792.336790] Killed process 9248 (syz-executor.4) total-vm:72852kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB 21:04:44 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) [ 1792.417153] oom_reaper: reaped process 9248 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:04:44 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:46 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:04:46 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:04:46 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:46 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:46 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) [ 1793.247135] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1793.330150] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1793.366331] CPU: 1 PID: 31766 Comm: syz-executor.3 Not tainted 4.14.169-syzkaller #0 [ 1793.374256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1793.383621] Call Trace: [ 1793.386375] dump_stack+0x142/0x197 [ 1793.390023] dump_header+0x177/0x6cd [ 1793.393752] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1793.398999] ? ___ratelimit+0x55/0x537 [ 1793.402899] oom_kill_process.cold+0x10/0xadd [ 1793.407399] ? rcu_read_unlock_special+0x895/0xd40 [ 1793.412345] ? lock_downgrade+0x740/0x740 [ 1793.416616] out_of_memory+0x2ee/0x1180 [ 1793.420604] ? lock_acquire+0x16f/0x430 [ 1793.424718] ? oom_killer_disable+0x1d0/0x1d0 [ 1793.429223] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1793.434429] __alloc_pages_slowpath+0x2251/0x2930 [ 1793.439312] ? warn_alloc+0xf0/0xf0 [ 1793.442969] ? __might_sleep+0x93/0xb0 [ 1793.446870] __alloc_pages_nodemask+0x62c/0x7a0 [ 1793.451559] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1793.456683] ? ____cache_alloc_node+0x1be/0x1d0 [ 1793.461383] ? cache_grow_begin+0x335/0x400 [ 1793.465787] cache_grow_begin+0x80/0x400 [ 1793.469872] ? __cpuset_node_allowed+0xff/0x450 [ 1793.474581] fallback_alloc+0x1fd/0x2c0 [ 1793.478574] ____cache_alloc_node+0x1be/0x1d0 [ 1793.483085] kmem_cache_alloc+0x1f3/0x780 [ 1793.487254] getname_flags+0xcb/0x580 [ 1793.491068] user_path_mountpoint_at+0x29/0x50 [ 1793.495663] SyS_umount+0x10c/0x380 [ 1793.499300] ? __do_page_fault+0x358/0xb80 [ 1793.503542] ? __detach_mounts+0x2f0/0x2f0 [ 1793.507889] ? do_syscall_64+0x53/0x640 [ 1793.511864] ? __detach_mounts+0x2f0/0x2f0 [ 1793.516112] do_syscall_64+0x1e8/0x640 [ 1793.520008] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1793.524870] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1793.530064] RIP: 0033:0x45ddc7 [ 1793.533257] RSP: 002b:00007ffdd0b8ec48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1793.540974] RAX: ffffffffffffffda RBX: 00000000001b5a63 RCX: 000000000045ddc7 [ 1793.548247] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffdd0b8fd80 [ 1793.555516] RBP: 0000000000000446 R08: 0000000000000001 R09: 000000000140d940 [ 1793.562784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd0b8fd80 [ 1793.570071] R13: 00007ffdd0b8fd70 R14: 0000000000000000 R15: 00007ffdd0b8fd80 [ 1794.017407] Mem-Info: [ 1794.019877] active_anon:769359 inactive_anon:549655 isolated_anon:0 [ 1794.019877] active_file:149 inactive_file:342 isolated_file:0 [ 1794.019877] unevictable:0 dirty:40 writeback:0 unstable:0 [ 1794.019877] slab_reclaimable:21588 slab_unreclaimable:121834 [ 1794.019877] mapped:601626 shmem:610054 pagetables:30037 bounce:0 [ 1794.019877] free:23506 free_pcp:0 free_cma:0 [ 1794.068316] Node 0 active_anon:874616kB inactive_anon:1015456kB active_file:112kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223736kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1794.097868] Node 1 active_anon:2202852kB inactive_anon:1183164kB active_file:364kB inactive_file:368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1182004kB dirty:72kB writeback:16kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1794.126694] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1794.156443] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1794.161710] Node 0 DMA32 free:27268kB min:36384kB low:45480kB high:54576kB active_anon:873656kB inactive_anon:1011236kB active_file:112kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17568kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1794.285153] lowmem_reserve[]: 0 0 0 0 0 [ 1794.307487] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1794.372281] lowmem_reserve[]: 0 0 0 0 0 [ 1794.376472] Node 1 Normal free:57720kB min:53504kB low:66880kB high:80256kB active_anon:2202852kB inactive_anon:1183164kB active_file:556kB inactive_file:100kB unevictable:0kB writepending:84kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23584kB pagetables:89740kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1794.413053] lowmem_reserve[]: 0 0 0 0 0 [ 1794.417468] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1794.438769] Node 0 DMA32: 299*4kB (UME) 1965*8kB (UME) 234*16kB (UME) 20*32kB (UME) 51*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27380kB [ 1794.460371] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1794.476468] Node 1 Normal: 561*4kB (UME) 348*8kB (UME) 197*16kB (UME) 196*32kB (UME) 128*64kB (UME) 150*128kB (UM) 39*256kB (M) 11*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 57460kB [ 1794.504162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1794.513719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1794.526433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1794.535886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1794.545230] 610290 total pagecache pages [ 1794.557067] 0 pages in swap cache [ 1794.560622] Swap cache stats: add 0, delete 0, find 0/0 [ 1794.565989] Free swap = 0kB [ 1794.569115] Total swap = 0kB [ 1794.572271] 1965979 pages RAM [ 1794.575377] 0 pages HighMem/MovableOnly [ 1794.579426] 335855 pages reserved [ 1794.582943] 0 pages cma reserved [ 1794.586413] Out of memory: Kill process 30282 (syz-executor.0) score 1007 or sacrifice child [ 1794.595235] Killed process 30282 (syz-executor.0) total-vm:72984kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB [ 1794.668182] oom_reaper: reaped process 30282 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:04:49 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:04:49 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:49 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:49 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:04:49 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:49 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:04:49 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:49 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) [ 1795.844942] kworker/u4:10 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1795.907998] kworker/u4:10 cpuset=/ mems_allowed=0-1 [ 1795.948182] CPU: 0 PID: 9319 Comm: kworker/u4:10 Not tainted 4.14.169-syzkaller #0 [ 1795.956071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1795.965642] Call Trace: [ 1795.968245] dump_stack+0x142/0x197 [ 1795.971887] dump_header+0x177/0x6cd [ 1795.975619] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1795.980868] ? ___ratelimit+0x55/0x537 [ 1795.984778] oom_kill_process.cold+0x10/0xadd [ 1795.989281] ? rcu_read_unlock_special+0x895/0xd40 [ 1795.994229] ? lock_downgrade+0x740/0x740 [ 1795.998402] out_of_memory+0x2ee/0x1180 [ 1796.002586] ? lock_acquire+0x16f/0x430 [ 1796.006726] ? oom_killer_disable+0x1d0/0x1d0 [ 1796.011236] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1796.016285] __alloc_pages_slowpath+0x2251/0x2930 [ 1796.021156] ? warn_alloc+0xf0/0xf0 [ 1796.024806] ? __might_sleep+0x93/0xb0 [ 1796.028706] __alloc_pages_nodemask+0x62c/0x7a0 [ 1796.033391] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1796.038424] ? cache_grow_begin+0x335/0x400 [ 1796.042765] cache_grow_begin+0x80/0x400 [ 1796.047795] ? __cpuset_node_allowed+0xff/0x450 [ 1796.052480] fallback_alloc+0x1fd/0x2c0 [ 1796.056631] ____cache_alloc_node+0x1be/0x1d0 [ 1796.061139] kmem_cache_alloc_trace+0x213/0x790 [ 1796.065964] ima_calc_file_hash+0x3ec/0x820 [ 1796.070311] ? ext4_xattr_get+0x13e/0x8b0 [ 1796.074492] ? ima_alloc_tfm+0x9f/0xc0 [ 1796.078396] ? ima_calc_file_hash+0x148/0x820 [ 1796.082914] ima_collect_measurement+0x3c1/0x450 [ 1796.087687] ? ima_get_action+0x80/0x80 [ 1796.091689] ? ima_get_cache_status+0x180/0x180 [ 1796.096379] process_measurement+0x7dd/0xb80 [ 1796.100897] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 1796.105925] ? __lock_acquire+0x5f7/0x4620 [ 1796.110179] ? __lock_acquire+0x5f7/0x4620 [ 1796.114437] ? trace_hardirqs_on+0x10/0x10 [ 1796.118683] ? save_trace+0x290/0x290 [ 1796.122494] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1796.127440] ? save_trace+0x290/0x290 [ 1796.131254] ? __task_pid_nr_ns+0x1cb/0x450 [ 1796.135690] ? do_execveat_common.isra.0+0xfd1/0x1dd0 [ 1796.140893] ? find_held_lock+0x35/0x130 [ 1796.144978] ima_bprm_check+0x49/0x60 [ 1796.148796] security_bprm_check+0x94/0xb0 [ 1796.153077] search_binary_handler+0x6b/0x6f0 [ 1796.157589] do_execveat_common.isra.0+0x1000/0x1dd0 [ 1796.162712] ? prepare_bprm_creds+0x120/0x120 [ 1796.167218] ? commit_creds+0x6b2/0xef0 [ 1796.171213] do_execve+0x31/0x40 [ 1796.174592] call_usermodehelper_exec_async+0x292/0x4c0 [ 1796.179978] ? umh_complete+0x90/0x90 [ 1796.183800] ret_from_fork+0x24/0x30 [ 1796.827383] Mem-Info: [ 1796.852154] active_anon:766561 inactive_anon:549655 isolated_anon:0 [ 1796.852154] active_file:157 inactive_file:356 isolated_file:0 [ 1796.852154] unevictable:0 dirty:41 writeback:17 unstable:0 [ 1796.852154] slab_reclaimable:21709 slab_unreclaimable:121949 [ 1796.852154] mapped:601540 shmem:610054 pagetables:30059 bounce:0 [ 1796.852154] free:25798 free_pcp:131 free_cma:0 [ 1797.040312] Node 0 active_anon:874632kB inactive_anon:1015456kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1797.193413] Node 1 active_anon:2191652kB inactive_anon:1183164kB active_file:1432kB inactive_file:2532kB unevictable:0kB isolated(anon):0kB isolated(file):372kB mapped:1185284kB dirty:204kB writeback:4kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1797.260083] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1797.294679] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1797.299887] Node 0 DMA32 free:27360kB min:36384kB low:45480kB high:54576kB active_anon:873676kB inactive_anon:1011236kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17568kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1797.332800] lowmem_reserve[]: 0 0 0 0 0 [ 1797.337657] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1797.371724] lowmem_reserve[]: 0 0 0 0 0 [ 1797.420152] Node 1 Normal free:63252kB min:53504kB low:66880kB high:80256kB active_anon:2191652kB inactive_anon:1183164kB active_file:1876kB inactive_file:2032kB unevictable:0kB writepending:208kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23680kB pagetables:89828kB bounce:0kB free_pcp:1128kB local_pcp:640kB free_cma:0kB [ 1797.490095] lowmem_reserve[]: 0 0 0 0 0 [ 1797.494140] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1797.530097] Node 0 DMA32: 294*4kB (UME) 1965*8kB (UME) 234*16kB (UME) 20*32kB (UME) 51*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27360kB [ 1797.549864] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1797.583853] Node 1 Normal: 653*4kB (UME) 280*8kB (UM) 224*16kB (UME) 204*32kB (UME) 165*64kB (UME) 173*128kB (UM) 45*256kB (M) 11*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 64820kB [ 1797.626724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1797.636857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1797.655172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1797.666845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1797.688791] 610852 total pagecache pages [ 1797.716328] 0 pages in swap cache [ 1797.719822] Swap cache stats: add 0, delete 0, find 0/0 [ 1797.751873] Free swap = 0kB [ 1797.754979] Total swap = 0kB [ 1797.768213] 1965979 pages RAM [ 1797.778338] 0 pages HighMem/MovableOnly [ 1797.788450] 335855 pages reserved [ 1797.798568] 0 pages cma reserved [ 1797.808671] Out of memory: Kill process 30401 (syz-executor.0) score 1007 or sacrifice child [ 1797.830845] Killed process 30401 (syz-executor.0) total-vm:72984kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB [ 1797.976482] oom_reaper: reaped process 30401 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:04:51 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:52 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:04:52 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:52 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:04:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:04:52 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) [ 1798.840871] kworker/u4:9 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1798.926603] kworker/u4:9 cpuset=/ mems_allowed=0-1 [ 1798.960348] CPU: 1 PID: 8706 Comm: kworker/u4:9 Not tainted 4.14.169-syzkaller #0 [ 1798.968149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1798.977527] Workqueue: events_unbound call_usermodehelper_exec_work [ 1798.983964] Call Trace: [ 1798.986575] dump_stack+0x142/0x197 [ 1798.990233] dump_header+0x177/0x6cd [ 1798.993963] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1798.999082] ? ___ratelimit+0x55/0x537 [ 1799.003130] oom_kill_process.cold+0x10/0xadd [ 1799.007654] ? rcu_read_unlock_special+0x895/0xd40 [ 1799.012907] ? lock_downgrade+0x740/0x740 [ 1799.018945] out_of_memory+0x2ee/0x1180 [ 1799.023041] ? lock_acquire+0x16f/0x430 [ 1799.027032] ? oom_killer_disable+0x1d0/0x1d0 [ 1799.031545] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1799.036497] __alloc_pages_slowpath+0x2251/0x2930 [ 1799.041502] ? warn_alloc+0xf0/0xf0 [ 1799.045152] ? __might_sleep+0x93/0xb0 [ 1799.049072] __alloc_pages_nodemask+0x62c/0x7a0 [ 1799.053781] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1799.058818] ? cache_grow_begin+0x335/0x400 [ 1799.063158] cache_grow_begin+0x80/0x400 [ 1799.067368] ? __cpuset_node_allowed+0xff/0x450 [ 1799.072052] fallback_alloc+0x1fd/0x2c0 [ 1799.076052] ____cache_alloc_node+0x1be/0x1d0 [ 1799.080570] kmem_cache_alloc_node+0xe3/0x780 [ 1799.085085] copy_process.part.0+0x17d5/0x6a70 [ 1799.089809] ? __lock_acquire+0x5f7/0x4620 [ 1799.094393] ? __lock_acquire+0x5f7/0x4620 [ 1799.098637] ? kmem_cache_free+0x83/0x2b0 [ 1799.102793] ? inotify_free_mark+0x38/0x50 [ 1799.107043] ? fsnotify_final_mark_destroy+0x7c/0xc0 [ 1799.112151] ? fsnotify_mark_destroy_workfn+0x1f0/0x320 [ 1799.117531] ? process_one_work+0x863/0x1600 [ 1799.121954] ? kthread+0x319/0x430 [ 1799.125497] ? ret_from_fork+0x24/0x30 [ 1799.129400] ? trace_hardirqs_on+0x10/0x10 [ 1799.133650] ? umh_complete+0x90/0x90 [ 1799.137475] ? __cleanup_sighand+0x50/0x50 [ 1799.141715] ? kernel_sigaction+0x147/0x210 [ 1799.146150] ? find_held_lock+0x35/0x130 [ 1799.150218] _do_fork+0x19e/0xce0 [ 1799.153687] ? umh_complete+0x90/0x90 [ 1799.157549] ? fork_idle+0x280/0x280 [ 1799.161281] ? trace_hardirqs_on_caller+0x400/0x590 [ 1799.166303] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1799.170800] ? kernel_sigaction+0x147/0x210 [ 1799.175129] ? recalc_sigpending+0xa0/0xa0 [ 1799.179429] ? umh_complete+0x90/0x90 [ 1799.183280] kernel_thread+0x34/0x40 [ 1799.186990] call_usermodehelper_exec_work+0xa4/0x220 [ 1799.192186] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 1799.197840] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1799.203287] process_one_work+0x863/0x1600 [ 1799.207533] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 1799.212202] worker_thread+0x5d9/0x1050 [ 1799.216189] kthread+0x319/0x430 [ 1799.219549] ? process_one_work+0x1600/0x1600 [ 1799.224047] ? kthread_create_on_node+0xd0/0xd0 [ 1799.228713] ret_from_fork+0x24/0x30 21:04:53 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:04:53 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) [ 1799.596270] Mem-Info: [ 1799.612961] active_anon:763889 inactive_anon:549653 isolated_anon:0 [ 1799.612961] active_file:893 inactive_file:1739 isolated_file:116 [ 1799.612961] unevictable:0 dirty:52 writeback:0 unstable:0 [ 1799.612961] slab_reclaimable:21836 slab_unreclaimable:122195 [ 1799.612961] mapped:603178 shmem:610054 pagetables:30150 bounce:0 [ 1799.612961] free:25567 free_pcp:263 free_cma:0 [ 1799.737736] Node 0 active_anon:874636kB inactive_anon:1015456kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1799.805408] Node 1 active_anon:2180920kB inactive_anon:1183156kB active_file:3408kB inactive_file:3112kB unevictable:0kB isolated(anon):0kB isolated(file):416kB mapped:1187188kB dirty:208kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1799.885681] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1799.920227] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1799.932954] Node 0 DMA32 free:27328kB min:36384kB low:45480kB high:54576kB active_anon:873676kB inactive_anon:1011236kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17568kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1799.997812] lowmem_reserve[]: 0 0 0 0 0 [ 1800.045999] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1800.108460] lowmem_reserve[]: 0 0 0 0 0 [ 1800.116416] Node 1 Normal free:72588kB min:53504kB low:66880kB high:80256kB active_anon:2180948kB inactive_anon:1183152kB active_file:1136kB inactive_file:1044kB unevictable:0kB writepending:208kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24000kB pagetables:90360kB bounce:0kB free_pcp:1332kB local_pcp:680kB free_cma:0kB [ 1800.156700] lowmem_reserve[]: 0 0 0 0 0 [ 1800.160901] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1800.182617] Node 0 DMA32: 291*4kB (UE) 1965*8kB (UME) 234*16kB (UME) 20*32kB (UME) 51*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27348kB [ 1800.201699] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1800.223158] Node 1 Normal: 807*4kB (UME) 553*8kB (UME) 148*16kB (UME) 274*32kB (UME) 199*64kB (UME) 196*128kB (UM) 48*256kB (M) 11*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 74532kB [ 1800.243274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1800.261451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1800.282196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1800.304260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1800.325985] 610619 total pagecache pages [ 1800.360114] 0 pages in swap cache [ 1800.363610] Swap cache stats: add 0, delete 0, find 0/0 [ 1800.421739] Free swap = 0kB [ 1800.424804] Total swap = 0kB [ 1800.470143] 1965979 pages RAM [ 1800.483476] 0 pages HighMem/MovableOnly [ 1800.487629] 335855 pages reserved [ 1800.513799] 0 pages cma reserved [ 1800.517206] Out of memory: Kill process 31051 (syz-executor.0) score 1007 or sacrifice child [ 1800.531429] Killed process 31051 (syz-executor.0) total-vm:72984kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB [ 1800.667198] oom_reaper: reaped process 31051 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:04:54 executing program 1: timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:04:54 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0), 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:04:54 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) sendmmsg(r0, 0x0, 0x0, 0x0) 21:04:54 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:04:55 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) [ 1801.297230] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 1801.366374] blkid cpuset=/ mems_allowed=0-1 [ 1801.390314] CPU: 1 PID: 9378 Comm: blkid Not tainted 4.14.169-syzkaller #0 [ 1801.397449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1801.406814] Call Trace: [ 1801.409417] dump_stack+0x142/0x197 [ 1801.413062] dump_header+0x177/0x6cd [ 1801.416786] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1801.421894] ? ___ratelimit+0x55/0x537 [ 1801.425789] oom_kill_process.cold+0x10/0xadd [ 1801.430287] ? rcu_read_unlock_special+0x895/0xd40 [ 1801.435227] ? lock_downgrade+0x740/0x740 [ 1801.439384] out_of_memory+0x2ee/0x1180 [ 1801.443357] ? lock_acquire+0x16f/0x430 [ 1801.447347] ? oom_killer_disable+0x1d0/0x1d0 [ 1801.451852] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1801.456793] __alloc_pages_slowpath+0x2251/0x2930 [ 1801.461664] ? warn_alloc+0xf0/0xf0 [ 1801.465315] ? __might_sleep+0x93/0xb0 [ 1801.469217] __alloc_pages_nodemask+0x62c/0x7a0 [ 1801.473905] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1801.479064] ? ____cache_alloc_node+0x1be/0x1d0 [ 1801.483743] ? cache_grow_begin+0x335/0x400 [ 1801.488099] cache_grow_begin+0x80/0x400 [ 1801.492168] ? __cpuset_node_allowed+0xff/0x450 [ 1801.496902] fallback_alloc+0x1fd/0x2c0 [ 1801.500899] ____cache_alloc_node+0x1be/0x1d0 [ 1801.505406] kmem_cache_alloc+0x1f3/0x780 [ 1801.509568] getname_flags+0xcb/0x580 [ 1801.513382] getname+0x1a/0x20 [ 1801.516842] do_sys_open+0x1e7/0x430 [ 1801.520568] ? filp_open+0x70/0x70 [ 1801.524223] ? SyS_open+0x40/0x40 [ 1801.527737] SyS_openat+0x30/0x40 [ 1801.531215] ? SyS_open+0x40/0x40 [ 1801.534682] do_syscall_64+0x1e8/0x640 [ 1801.538600] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1801.543459] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1801.548790] RIP: 0033:0x7fe9214b11c8 [ 1801.552501] RSP: 002b:00007ffe7f6c7e60 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1801.560263] RAX: ffffffffffffffda RBX: 00007ffe7f6c8410 RCX: 00007fe9214b11c8 [ 1801.567749] RDX: 0000000000000000 RSI: 00007fe921787ea0 RDI: 0000000000000004 [ 1801.575030] RBP: 00007fe921789064 R08: 0000000000000000 R09: 0000000000000001 [ 1801.582311] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe921787ea0 [ 1801.589592] R13: 0000000000000000 R14: 00007fe921992820 R15: 00007fe9217882a2 21:04:55 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0), 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:04:56 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 1802.149253] Mem-Info: [ 1802.152854] active_anon:767242 inactive_anon:549653 isolated_anon:0 [ 1802.152854] active_file:282 inactive_file:379 isolated_file:53 [ 1802.152854] unevictable:0 dirty:24 writeback:1 unstable:0 [ 1802.152854] slab_reclaimable:21948 slab_unreclaimable:122454 [ 1802.152854] mapped:601799 shmem:610054 pagetables:30171 bounce:0 [ 1802.152854] free:24210 free_pcp:68 free_cma:0 [ 1802.194760] Node 0 active_anon:874640kB inactive_anon:1015456kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1802.294225] Node 1 active_anon:2197228kB inactive_anon:1183156kB active_file:624kB inactive_file:780kB unevictable:0kB isolated(anon):0kB isolated(file):56kB mapped:1182972kB dirty:96kB writeback:4kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1802.358035] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1802.401641] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1802.406734] Node 0 DMA32 free:27336kB min:36384kB low:45480kB high:54576kB active_anon:873680kB inactive_anon:1011236kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17568kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1802.440065] lowmem_reserve[]: 0 0 0 0 0 [ 1802.444099] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1802.477089] lowmem_reserve[]: 0 0 0 0 0 [ 1802.486976] Node 1 Normal free:57804kB min:53504kB low:66880kB high:80256kB active_anon:2197512kB inactive_anon:1183156kB active_file:260kB inactive_file:1188kB unevictable:0kB writepending:76kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23872kB pagetables:90276kB bounce:0kB free_pcp:156kB local_pcp:24kB free_cma:0kB [ 1802.547703] lowmem_reserve[]: 0 0 0 0 0 [ 1802.551910] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1802.573293] Node 0 DMA32: 290*4kB (UE) 1964*8kB (UME) 234*16kB (UME) 20*32kB (UME) 51*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27336kB [ 1802.594540] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1802.607658] Node 1 Normal: 354*4kB (UM) 138*8kB (UM) 44*16kB (UME) 10*32kB (UME) 153*64kB (UME) 211*128kB (UM) 49*256kB (M) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 58520kB [ 1802.629040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1802.649816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1802.673458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1802.684857] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1802.697952] 610251 total pagecache pages [ 1802.704248] 0 pages in swap cache [ 1802.707717] Swap cache stats: add 0, delete 0, find 0/0 [ 1802.719816] Free swap = 0kB [ 1802.736831] Total swap = 0kB [ 1802.739888] 1965979 pages RAM [ 1802.743065] 0 pages HighMem/MovableOnly [ 1802.747042] 335855 pages reserved [ 1802.755264] 0 pages cma reserved [ 1802.758652] Out of memory: Kill process 9368 (syz-executor.2) score 1007 or sacrifice child [ 1802.817411] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 1802.839954] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1802.848310] CPU: 0 PID: 9375 Comm: syz-executor.4 Not tainted 4.14.169-syzkaller #0 [ 1802.856127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.865506] Call Trace: [ 1802.868109] dump_stack+0x142/0x197 [ 1802.871879] dump_header+0x177/0x6cd [ 1802.875622] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1802.880737] ? ___ratelimit+0x55/0x537 [ 1802.884637] oom_kill_process.cold+0x10/0xadd [ 1802.889124] ? rcu_read_unlock_special+0x895/0xd40 [ 1802.894044] ? lock_downgrade+0x740/0x740 [ 1802.898197] out_of_memory+0x2ee/0x1180 [ 1802.902344] ? lock_acquire+0x16f/0x430 [ 1802.906309] ? oom_killer_disable+0x1d0/0x1d0 [ 1802.910791] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1802.915716] __alloc_pages_slowpath+0x2251/0x2930 [ 1802.920555] ? warn_alloc+0xf0/0xf0 [ 1802.924173] ? __might_sleep+0x93/0xb0 [ 1802.928047] __alloc_pages_nodemask+0x62c/0x7a0 [ 1802.932717] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1802.937726] cache_grow_begin+0x80/0x400 [ 1802.941786] ? __cpuset_node_allowed+0xff/0x450 [ 1802.946440] fallback_alloc+0x1fd/0x2c0 [ 1802.950402] ____cache_alloc_node+0x1be/0x1d0 [ 1802.954893] kmem_cache_alloc_node+0xe3/0x780 [ 1802.959371] ? save_trace+0x290/0x290 [ 1802.963154] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1802.968068] ? check_preemption_disabled+0x3c/0x250 [ 1802.973071] copy_process.part.0+0x17d5/0x6a70 [ 1802.977635] ? __handle_mm_fault+0x1bc2/0x33d0 [ 1802.982208] ? lock_downgrade+0x740/0x740 [ 1802.986513] ? pud_val+0xe0/0xe0 [ 1802.989862] ? do_raw_spin_unlock+0x174/0x260 [ 1802.994346] ? _raw_spin_unlock+0x2d/0x50 [ 1802.998482] ? __cleanup_sighand+0x50/0x50 [ 1803.002700] ? __do_page_fault+0x4e9/0xb80 [ 1803.006918] ? find_held_lock+0x35/0x130 [ 1803.010978] _do_fork+0x19e/0xce0 [ 1803.014427] ? fork_idle+0x280/0x280 [ 1803.018125] ? up_read+0x1a/0x40 [ 1803.021493] ? __do_page_fault+0x358/0xb80 [ 1803.025753] ? mprotect_fixup+0x920/0x920 [ 1803.029911] SyS_clone+0x37/0x50 [ 1803.033310] ? sys_vfork+0x30/0x30 [ 1803.036849] do_syscall_64+0x1e8/0x640 [ 1803.040766] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1803.045703] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1803.050896] RIP: 0033:0x45dd69 [ 1803.054072] RSP: 002b:00007ffdb1dd31d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1803.061765] RAX: ffffffffffffffda RBX: 00007f2227822700 RCX: 000000000045dd69 [ 1803.069021] RDX: 00007f22278229d0 RSI: 00007f2227821db0 RDI: 00000000003d0f00 [ 1803.076273] RBP: 00007ffdb1dd33f0 R08: 00007f2227822700 R09: 00007f2227822700 [ 1803.083530] R10: 00007f22278229d0 R11: 0000000000000202 R12: 0000000000000000 [ 1803.090797] R13: 00007ffdb1dd328f R14: 00007f22278229c0 R15: 000000000075c1cc [ 1803.202747] Mem-Info: [ 1803.205726] active_anon:768038 inactive_anon:549653 isolated_anon:0 [ 1803.205726] active_file:29 inactive_file:65 isolated_file:0 [ 1803.205726] unevictable:0 dirty:2 writeback:3 unstable:0 [ 1803.205726] slab_reclaimable:21948 slab_unreclaimable:122329 [ 1803.205726] mapped:601276 shmem:610054 pagetables:30173 bounce:0 [ 1803.205726] free:23925 free_pcp:218 free_cma:0 [ 1803.254384] Node 0 active_anon:874640kB inactive_anon:1015456kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1803.283200] Node 1 active_anon:2197512kB inactive_anon:1183156kB active_file:100kB inactive_file:720kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1181824kB dirty:8kB writeback:12kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1803.320227] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1803.368703] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1803.380736] Node 0 DMA32 free:27336kB min:36384kB low:45480kB high:54576kB active_anon:873680kB inactive_anon:1011236kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17568kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1803.457690] lowmem_reserve[]: 0 0 0 0 0 [ 1803.468436] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1803.498450] lowmem_reserve[]: 0 0 0 0 0 [ 1803.503315] Node 1 Normal free:58132kB min:53504kB low:66880kB high:80256kB active_anon:2197512kB inactive_anon:1183156kB active_file:0kB inactive_file:588kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23872kB pagetables:90276kB bounce:0kB free_pcp:344kB local_pcp:88kB free_cma:0kB [ 1803.534031] lowmem_reserve[]: 0 0 0 0 0 [ 1803.539111] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1803.555026] Node 0 DMA32: 290*4kB (UE) 1964*8kB (UME) 234*16kB (UME) 20*32kB (UME) 51*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27336kB [ 1803.586850] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1803.606266] Node 1 Normal: 267*4kB (UM) 106*8kB (UM) 44*16kB (UME) 13*32kB (UME) 133*64kB (UME) 211*128kB (UM) 49*256kB (M) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 56732kB [ 1803.629695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1803.639005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1803.647848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1803.657092] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1803.665954] 610947 total pagecache pages [ 1803.670422] 0 pages in swap cache [ 1803.674570] Swap cache stats: add 0, delete 0, find 0/0 [ 1803.680172] Free swap = 0kB [ 1803.683396] Total swap = 0kB [ 1803.686574] 1965979 pages RAM [ 1803.689955] 0 pages HighMem/MovableOnly [ 1803.694279] 335855 pages reserved [ 1803.697835] 0 pages cma reserved [ 1803.701356] Out of memory: Kill process 9388 (syz-executor.2) score 1007 or sacrifice child [ 1803.710083] Killed process 9388 (syz-executor.2) total-vm:72984kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB [ 1803.802947] oom_reaper: reaped process 9388 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:04:58 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:04:58 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 1804.707953] kworker/u4:9 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1804.782315] kworker/u4:9 cpuset=/ mems_allowed=0-1 [ 1804.812505] CPU: 1 PID: 8706 Comm: kworker/u4:9 Not tainted 4.14.169-syzkaller #0 [ 1804.820510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1804.830647] Workqueue: events_unbound call_usermodehelper_exec_work [ 1804.837286] Call Trace: [ 1804.840066] dump_stack+0x142/0x197 [ 1804.844259] dump_header+0x177/0x6cd [ 1804.848240] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1804.853642] ? ___ratelimit+0x55/0x537 [ 1804.857794] oom_kill_process.cold+0x10/0xadd [ 1804.862530] ? rcu_read_unlock_special+0x895/0xd40 [ 1804.867495] ? lock_downgrade+0x740/0x740 [ 1804.871840] out_of_memory+0x2ee/0x1180 [ 1804.875836] ? lock_acquire+0x16f/0x430 [ 1804.879974] ? oom_killer_disable+0x1d0/0x1d0 [ 1804.884977] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1804.890286] __alloc_pages_slowpath+0x2251/0x2930 [ 1804.895231] ? warn_alloc+0xf0/0xf0 [ 1804.899235] ? __might_sleep+0x93/0xb0 [ 1804.903243] __alloc_pages_nodemask+0x62c/0x7a0 [ 1804.907920] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1804.913164] ? cache_grow_begin+0x335/0x400 [ 1804.917492] cache_grow_begin+0x80/0x400 [ 1804.921643] ? __cpuset_node_allowed+0xff/0x450 [ 1804.926713] fallback_alloc+0x1fd/0x2c0 [ 1804.930692] ____cache_alloc_node+0x1be/0x1d0 [ 1804.935276] kmem_cache_alloc_node+0xe3/0x780 [ 1804.939893] copy_process.part.0+0x17d5/0x6a70 [ 1804.945603] ? __lock_acquire+0x5f7/0x4620 [ 1804.949936] ? __lock_acquire+0x5f7/0x4620 [ 1804.954470] ? kmem_cache_free+0x83/0x2b0 [ 1804.959232] ? inotify_free_mark+0x38/0x50 [ 1804.963823] ? fsnotify_final_mark_destroy+0x7c/0xc0 [ 1804.969351] ? trace_hardirqs_on+0x10/0x10 [ 1804.973810] ? umh_complete+0x90/0x90 [ 1804.978171] ? __cleanup_sighand+0x50/0x50 [ 1804.983013] ? kernel_sigaction+0x147/0x210 [ 1804.987497] ? find_held_lock+0x35/0x130 [ 1804.991595] _do_fork+0x19e/0xce0 [ 1804.995267] ? umh_complete+0x90/0x90 [ 1804.999206] ? fork_idle+0x280/0x280 [ 1805.003240] ? trace_hardirqs_on_caller+0x400/0x590 [ 1805.008376] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1805.013492] ? kernel_sigaction+0x147/0x210 [ 1805.017837] ? recalc_sigpending+0xa0/0xa0 [ 1805.023203] ? umh_complete+0x90/0x90 [ 1805.027318] kernel_thread+0x34/0x40 [ 1805.031131] call_usermodehelper_exec_work+0xa4/0x220 [ 1805.036432] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 1805.041972] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1805.047942] process_one_work+0x863/0x1600 [ 1805.052441] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 1805.057469] worker_thread+0x5d9/0x1050 21:04:59 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0), 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:04:59 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) [ 1805.061658] kthread+0x319/0x430 [ 1805.065337] ? process_one_work+0x1600/0x1600 [ 1805.070009] ? kthread_create_on_node+0xd0/0xd0 [ 1805.075383] ret_from_fork+0x24/0x30 [ 1805.562934] Mem-Info: [ 1805.566024] active_anon:761851 inactive_anon:549653 isolated_anon:0 [ 1805.566024] active_file:610 inactive_file:584 isolated_file:66 [ 1805.566024] unevictable:0 dirty:27 writeback:0 unstable:0 [ 1805.566024] slab_reclaimable:22048 slab_unreclaimable:122519 [ 1805.566024] mapped:602142 shmem:610054 pagetables:30214 bounce:0 [ 1805.566024] free:28587 free_pcp:74 free_cma:0 [ 1805.681612] Node 0 active_anon:874640kB inactive_anon:1015456kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 21:04:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) sendmmsg(r0, 0x0, 0x0, 0x0) [ 1805.711923] Node 1 active_anon:2172864kB inactive_anon:1183156kB active_file:3712kB inactive_file:2436kB unevictable:0kB isolated(anon):0kB isolated(file):268kB mapped:1185444kB dirty:108kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1805.878463] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.959673] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1805.983237] Node 0 DMA32 free:27288kB min:36384kB low:45480kB high:54576kB active_anon:873680kB inactive_anon:1011236kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17568kB pagetables:30408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 21:05:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) sendmmsg(r0, 0x0, 0x0, 0x0) [ 1806.072075] lowmem_reserve[]: 0 0 0 0 0 [ 1806.077692] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1806.243056] lowmem_reserve[]: 0 0 0 0 0 [ 1806.294115] Node 1 Normal free:65640kB min:53504kB low:66880kB high:80256kB active_anon:2180436kB inactive_anon:1183164kB active_file:3400kB inactive_file:4072kB unevictable:0kB writepending:124kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24160kB pagetables:90800kB bounce:0kB free_pcp:708kB local_pcp:200kB free_cma:0kB [ 1806.430191] lowmem_reserve[]: 0 0 0 0 0 [ 1806.440599] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1806.471981] Node 0 DMA32: 286*4kB (UE) 1959*8kB (UME) 234*16kB (UME) 20*32kB (UME) 51*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27280kB [ 1806.611144] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1806.690230] Node 1 Normal: 119*4kB (UMEH) 104*8kB (UMEH) 141*16kB (UMEH) 350*32kB (UME) 213*64kB (UME) 213*128kB (UME) 53*256kB (ME) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 72300kB [ 1806.756100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.806833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1806.819295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.933052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1807.008654] 611837 total pagecache pages [ 1807.039978] 0 pages in swap cache [ 1807.066220] Swap cache stats: add 0, delete 0, find 0/0 [ 1807.102933] Free swap = 0kB [ 1807.119538] Total swap = 0kB [ 1807.127834] 1965979 pages RAM [ 1807.139542] 0 pages HighMem/MovableOnly [ 1807.154940] 335855 pages reserved [ 1807.164532] 0 pages cma reserved [ 1807.175910] Out of memory: Kill process 31453 (syz-executor.0) score 1007 or sacrifice child [ 1807.237075] Killed process 31453 (syz-executor.0) total-vm:72984kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB 21:05:01 executing program 1: timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:01 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:01 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b", 0x4a) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:01 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:05:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0) 21:05:01 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:02 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0) 21:05:02 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) [ 1808.351968] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 1808.466206] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1808.542552] CPU: 0 PID: 9472 Comm: syz-executor.4 Not tainted 4.14.169-syzkaller #0 [ 1808.551026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1808.560922] Call Trace: [ 1808.563631] dump_stack+0x142/0x197 [ 1808.567561] dump_header+0x177/0x6cd [ 1808.571519] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1808.576889] ? ___ratelimit+0x55/0x537 [ 1808.581039] oom_kill_process.cold+0x10/0xadd [ 1808.585769] ? rcu_read_unlock_special+0x895/0xd40 [ 1808.590797] ? lock_downgrade+0x740/0x740 [ 1808.595471] out_of_memory+0x2ee/0x1180 [ 1808.599749] ? lock_acquire+0x16f/0x430 [ 1808.603743] ? oom_killer_disable+0x1d0/0x1d0 [ 1808.608528] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1808.614031] __alloc_pages_slowpath+0x2251/0x2930 [ 1808.619223] ? warn_alloc+0xf0/0xf0 [ 1808.622870] ? __might_sleep+0x93/0xb0 [ 1808.626935] __alloc_pages_nodemask+0x62c/0x7a0 [ 1808.632318] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1808.637337] ? ____cache_alloc_node+0x1be/0x1d0 [ 1808.642308] ? cache_grow_begin+0x335/0x400 [ 1808.648029] cache_grow_begin+0x80/0x400 [ 1808.652110] ? __cpuset_node_allowed+0xff/0x450 [ 1808.657141] fallback_alloc+0x1fd/0x2c0 [ 1808.661212] ____cache_alloc_node+0x1be/0x1d0 [ 1808.666075] kmem_cache_alloc_node+0xe3/0x780 [ 1808.670749] ? save_trace+0x290/0x290 [ 1808.674631] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1808.679744] ? check_preemption_disabled+0x3c/0x250 [ 1808.685199] copy_process.part.0+0x17d5/0x6a70 [ 1808.689834] ? __handle_mm_fault+0x1bc2/0x33d0 [ 1808.694600] ? lock_downgrade+0x740/0x740 [ 1808.699354] ? pud_val+0xe0/0xe0 [ 1808.702900] ? do_raw_spin_unlock+0x174/0x260 [ 1808.707477] ? _raw_spin_unlock+0x2d/0x50 [ 1808.712436] ? __cleanup_sighand+0x50/0x50 [ 1808.716912] ? __do_page_fault+0x4e9/0xb80 [ 1808.721206] ? find_held_lock+0x35/0x130 [ 1808.725462] _do_fork+0x19e/0xce0 [ 1808.729051] ? fork_idle+0x280/0x280 [ 1808.732965] ? up_read+0x1a/0x40 [ 1808.736334] ? __do_page_fault+0x358/0xb80 [ 1808.740863] ? mprotect_fixup+0x920/0x920 [ 1808.746392] SyS_clone+0x37/0x50 [ 1808.749956] ? sys_vfork+0x30/0x30 [ 1808.753599] do_syscall_64+0x1e8/0x640 [ 1808.757720] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1808.762915] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1808.768427] RIP: 0033:0x45dd69 [ 1808.771660] RSP: 002b:00007ffdb1dd31d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1808.779957] RAX: ffffffffffffffda RBX: 00007f2227843700 RCX: 000000000045dd69 21:05:02 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b", 0x4a) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:02 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 1808.787861] RDX: 00007f22278439d0 RSI: 00007f2227842db0 RDI: 00000000003d0f00 [ 1808.795347] RBP: 00007ffdb1dd33f0 R08: 00007f2227843700 R09: 00007f2227843700 [ 1808.802926] R10: 00007f22278439d0 R11: 0000000000000202 R12: 0000000000000000 [ 1808.810555] R13: 00007ffdb1dd328f R14: 00007f22278439c0 R15: 000000000075c124 [ 1809.593263] Mem-Info: [ 1809.596489] active_anon:766868 inactive_anon:549652 isolated_anon:0 [ 1809.596489] active_file:148 inactive_file:122 isolated_file:8 [ 1809.596489] unevictable:0 dirty:46 writeback:1 unstable:0 [ 1809.596489] slab_reclaimable:22278 slab_unreclaimable:122817 [ 1809.596489] mapped:601459 shmem:610054 pagetables:30308 bounce:0 [ 1809.596489] free:23908 free_pcp:88 free_cma:0 [ 1809.633393] Node 0 active_anon:868544kB inactive_anon:1015460kB active_file:176kB inactive_file:176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223796kB dirty:84kB writeback:0kB shmem:1148348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1809.675656] Node 1 active_anon:2198928kB inactive_anon:1183148kB active_file:112kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:1181640kB dirty:100kB writeback:4kB shmem:1291868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1809.719582] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.748459] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1809.757018] Node 0 DMA32 free:32008kB min:36384kB low:45480kB high:54576kB active_anon:867584kB inactive_anon:1011240kB active_file:132kB inactive_file:112kB unevictable:0kB writepending:84kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17600kB pagetables:30504kB bounce:0kB free_pcp:104kB local_pcp:4kB free_cma:0kB [ 1809.788617] lowmem_reserve[]: 0 0 0 0 0 [ 1809.850220] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.933034] lowmem_reserve[]: 0 0 0 0 0 [ 1809.938610] Node 1 Normal free:54464kB min:53504kB low:66880kB high:80256kB active_anon:2198988kB inactive_anon:1183148kB active_file:560kB inactive_file:216kB unevictable:0kB writepending:120kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24032kB pagetables:90732kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1810.039765] lowmem_reserve[]: 0 0 0 0 0 [ 1810.073609] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1810.094085] Node 0 DMA32: 454*4kB (UME) 1975*8kB (UME) 272*16kB (UME) 58*32kB (UME) 86*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 32144kB [ 1810.120360] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1810.137425] Node 1 Normal: 247*4kB (UM) 80*8kB (UME) 8*16kB (UME) 11*32kB (UE) 135*64kB (M) 213*128kB (UME) 52*256kB (ME) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53372kB [ 1810.162598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1810.175008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1810.187323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1810.201171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1810.222922] 610112 total pagecache pages [ 1810.227444] 0 pages in swap cache [ 1810.240084] Swap cache stats: add 0, delete 0, find 0/0 [ 1810.245769] Free swap = 0kB [ 1810.249619] Total swap = 0kB [ 1810.265018] 1965979 pages RAM [ 1810.268424] 0 pages HighMem/MovableOnly [ 1810.286226] 335855 pages reserved [ 1810.299160] 0 pages cma reserved [ 1810.306278] Out of memory: Kill process 9461 (syz-executor.2) score 1007 or sacrifice child [ 1810.378563] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1810.409124] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1810.414758] CPU: 0 PID: 7394 Comm: syz-executor.2 Not tainted 4.14.169-syzkaller #0 [ 1810.423410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.432778] Call Trace: [ 1810.435389] dump_stack+0x142/0x197 [ 1810.439036] dump_header+0x177/0x6cd [ 1810.442775] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1810.448891] ? ___ratelimit+0x55/0x537 [ 1810.452806] oom_kill_process.cold+0x10/0xadd [ 1810.457309] ? oom_unkillable_task+0x294/0x390 [ 1810.461904] ? lock_downgrade+0x740/0x740 [ 1810.466070] out_of_memory+0x2ee/0x1180 [ 1810.470079] ? lock_acquire+0x16f/0x430 [ 1810.474234] ? oom_killer_disable+0x1d0/0x1d0 [ 1810.478738] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1810.483680] __alloc_pages_slowpath+0x2251/0x2930 [ 1810.488641] ? warn_alloc+0xf0/0xf0 [ 1810.492415] ? __might_sleep+0x93/0xb0 [ 1810.496307] __alloc_pages_nodemask+0x62c/0x7a0 [ 1810.500982] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1810.506002] ? ____cache_alloc_node+0x1be/0x1d0 [ 1810.510698] ? cache_grow_begin+0x335/0x400 [ 1810.515030] cache_grow_begin+0x80/0x400 [ 1810.519138] ? __cpuset_node_allowed+0xff/0x450 [ 1810.523827] fallback_alloc+0x1fd/0x2c0 [ 1810.528052] ____cache_alloc_node+0x1be/0x1d0 [ 1810.532565] kmem_cache_alloc+0x1f3/0x780 [ 1810.536788] getname_flags+0xcb/0x580 [ 1810.540591] user_path_mountpoint_at+0x29/0x50 [ 1810.545182] SyS_umount+0x10c/0x380 [ 1810.548820] ? __do_page_fault+0x358/0xb80 [ 1810.553055] ? __detach_mounts+0x2f0/0x2f0 [ 1810.557396] ? do_syscall_64+0x53/0x640 [ 1810.561371] ? __detach_mounts+0x2f0/0x2f0 [ 1810.565619] do_syscall_64+0x1e8/0x640 [ 1810.569503] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1810.575151] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1810.580348] RIP: 0033:0x45ddc7 [ 1810.583546] RSP: 002b:00007ffe4bc91598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1810.591262] RAX: ffffffffffffffda RBX: 00000000001b9865 RCX: 000000000045ddc7 [ 1810.598533] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe4bc926d0 [ 1810.605799] RBP: 0000000000000e34 R08: 0000000000000001 R09: 00000000011b4940 [ 1810.613173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4bc926d0 [ 1810.620550] R13: 00007ffe4bc926c0 R14: 0000000000000000 R15: 00007ffe4bc926d0 [ 1810.644775] Mem-Info: [ 1810.655897] active_anon:767212 inactive_anon:549652 isolated_anon:0 [ 1810.655897] active_file:27 inactive_file:19 isolated_file:8 [ 1810.655897] unevictable:0 dirty:14 writeback:1 unstable:0 [ 1810.655897] slab_reclaimable:22278 slab_unreclaimable:122821 [ 1810.655897] mapped:601276 shmem:610054 pagetables:30312 bounce:0 [ 1810.655897] free:23986 free_pcp:11 free_cma:0 [ 1810.690148] Node 0 active_anon:868544kB inactive_anon:1015460kB active_file:52kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223628kB dirty:48kB writeback:4kB shmem:1148348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1810.718646] Node 1 active_anon:2200304kB inactive_anon:1183148kB active_file:48kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:1181476kB dirty:8kB writeback:0kB shmem:1291868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1810.748339] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1810.783986] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1810.789082] Node 0 DMA32 free:32144kB min:36384kB low:45480kB high:54576kB active_anon:867584kB inactive_anon:1011240kB active_file:52kB inactive_file:44kB unevictable:0kB writepending:52kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17600kB pagetables:30504kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1810.836480] lowmem_reserve[]: 0 0 0 0 0 [ 1810.850247] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1810.881868] lowmem_reserve[]: 0 0 0 0 0 [ 1810.885908] Node 1 Normal free:53372kB min:53504kB low:66880kB high:80256kB active_anon:2200304kB inactive_anon:1183148kB active_file:164kB inactive_file:32kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24032kB pagetables:90736kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1810.923162] lowmem_reserve[]: 0 0 0 0 0 [ 1810.927198] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1810.948557] Node 0 DMA32: 452*4kB (UME) 1978*8kB (UME) 272*16kB (UME) 58*32kB (UME) 86*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 32160kB [ 1810.976001] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1810.987674] Node 1 Normal: 271*4kB (UM) 80*8kB (UME) 8*16kB (UME) 11*32kB (UE) 135*64kB (M) 213*128kB (UME) 52*256kB (ME) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53468kB [ 1811.007785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.017579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.026943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.035860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.044796] 610093 total pagecache pages [ 1811.048979] 0 pages in swap cache [ 1811.052623] Swap cache stats: add 0, delete 0, find 0/0 [ 1811.058087] Free swap = 0kB [ 1811.061172] Total swap = 0kB [ 1811.064197] 1965979 pages RAM [ 1811.067300] 0 pages HighMem/MovableOnly [ 1811.087376] 335855 pages reserved [ 1811.151861] 0 pages cma reserved [ 1811.155267] Out of memory: Kill process 9483 (syz-executor.2) score 1007 or sacrifice child [ 1811.268869] Killed process 9483 (syz-executor.2) total-vm:72984kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB [ 1811.738906] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1811.750552] modprobe cpuset=/ mems_allowed=0-1 [ 1811.755236] CPU: 1 PID: 9480 Comm: modprobe Not tainted 4.14.169-syzkaller #0 [ 1811.762496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1811.772203] Call Trace: [ 1811.774798] dump_stack+0x142/0x197 [ 1811.778439] dump_header+0x177/0x6cd [ 1811.782195] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1811.787312] ? ___ratelimit+0x55/0x537 [ 1811.791218] oom_kill_process.cold+0x10/0xadd [ 1811.795728] ? oom_unkillable_task+0x294/0x390 [ 1811.800327] ? lock_downgrade+0x740/0x740 [ 1811.804493] out_of_memory+0x2ee/0x1180 [ 1811.808480] ? lock_acquire+0x16f/0x430 [ 1811.812467] ? oom_killer_disable+0x1d0/0x1d0 [ 1811.816970] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1811.821931] __alloc_pages_slowpath+0x2251/0x2930 [ 1811.826801] ? warn_alloc+0xf0/0xf0 [ 1811.830443] ? __might_sleep+0x93/0xb0 [ 1811.834330] __alloc_pages_nodemask+0x62c/0x7a0 [ 1811.839159] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1811.844187] ? ____cache_alloc_node+0x1be/0x1d0 [ 1811.848843] ? cache_grow_begin+0x335/0x400 [ 1811.853157] cache_grow_begin+0x80/0x400 [ 1811.857231] ? __cpuset_node_allowed+0xff/0x450 [ 1811.862008] fallback_alloc+0x1fd/0x2c0 [ 1811.866080] ____cache_alloc_node+0x1be/0x1d0 [ 1811.871175] kmem_cache_alloc+0x1f3/0x780 [ 1811.875365] getname_flags+0xcb/0x580 [ 1811.879151] user_path_at_empty+0x2f/0x50 [ 1811.883283] vfs_statx+0xcd/0x160 [ 1811.886833] ? vfs_statx_fd+0xa0/0xa0 [ 1811.890638] ? find_held_lock+0x35/0x130 [ 1811.894689] SYSC_newstat+0x95/0x100 [ 1811.898383] ? cp_new_stat+0x5a0/0x5a0 [ 1811.902251] ? lock_downgrade+0x740/0x740 [ 1811.906382] ? up_read+0x1a/0x40 [ 1811.909727] ? __do_page_fault+0x358/0xb80 [ 1811.913945] ? firmware_map_remove+0x196/0x196 [ 1811.918980] ? do_syscall_64+0x53/0x640 [ 1811.922955] ? SyS_fstat+0x30/0x30 [ 1811.926481] SyS_newstat+0x1e/0x30 [ 1811.930221] do_syscall_64+0x1e8/0x640 [ 1811.934105] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1811.938931] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1811.944098] RIP: 0033:0x7f870059ec65 [ 1811.947789] RSP: 002b:00007ffd71f6caa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1811.955487] RAX: ffffffffffffffda RBX: 00007f870086a471 RCX: 00007f870059ec65 [ 1811.962824] RDX: 00007ffd71f6cba0 RSI: 00007ffd71f6cba0 RDI: 00007f870086a471 [ 1811.970072] RBP: 00007f8700a6f2e8 R08: 72656c6c616b7a79 R09: 00007ffd71f6dbf2 [ 1811.977333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1811.984582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1811.993633] Mem-Info: [ 1811.996071] active_anon:763086 inactive_anon:549652 isolated_anon:0 [ 1811.996071] active_file:22 inactive_file:7 isolated_file:0 [ 1811.996071] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1811.996071] slab_reclaimable:22281 slab_unreclaimable:122842 [ 1811.996071] mapped:601267 shmem:610054 pagetables:30279 bounce:0 [ 1811.996071] free:28185 free_pcp:0 free_cma:0 [ 1812.080543] Node 0 active_anon:858404kB inactive_anon:1015460kB active_file:416kB inactive_file:584kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1224300kB dirty:0kB writeback:0kB shmem:1148348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1812.109702] Node 1 active_anon:2193940kB inactive_anon:1183148kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1181444kB dirty:0kB writeback:0kB shmem:1291868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1812.152257] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.187651] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1812.197521] Node 0 DMA32 free:41076kB min:36384kB low:45480kB high:54576kB active_anon:857444kB inactive_anon:1011240kB active_file:96kB inactive_file:364kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17568kB pagetables:30476kB bounce:0kB free_pcp:648kB local_pcp:568kB free_cma:0kB [ 1812.255140] lowmem_reserve[]: 0 0 0 0 0 [ 1812.259517] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.287000] lowmem_reserve[]: 0 0 0 0 0 [ 1812.307539] Node 1 Normal free:60144kB min:53504kB low:66880kB high:80256kB active_anon:2193940kB inactive_anon:1183148kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23936kB pagetables:90632kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.346201] lowmem_reserve[]: 0 0 0 0 0 [ 1812.350310] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1812.386601] Node 0 DMA32: 201*4kB (UME) 1921*8kB (UME) 261*16kB (UME) 183*32kB (UME) 186*64kB (UM) 2*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 40924kB [ 1812.425819] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1812.437401] Node 1 Normal: 368*4kB (UM) 128*8kB (UME) 45*16kB (UME) 173*32kB (UME) 137*64kB (UM) 213*128kB (UME) 52*256kB (ME) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 60144kB [ 1812.453563] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.478452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.487184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.506207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.518061] 610103 total pagecache pages [ 1812.522207] 0 pages in swap cache [ 1812.525656] Swap cache stats: add 0, delete 0, find 0/0 [ 1812.571139] Free swap = 0kB [ 1812.574305] Total swap = 0kB [ 1812.578196] 1965979 pages RAM [ 1812.621147] 0 pages HighMem/MovableOnly [ 1812.625160] 335855 pages reserved [ 1812.639826] 0 pages cma reserved [ 1812.680513] Out of memory: Kill process 31535 (syz-executor.0) score 1007 or sacrifice child [ 1812.689172] Killed process 31535 (syz-executor.0) total-vm:72984kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB [ 1812.892620] oom_reaper: reaped process 31535 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:05:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0) 21:05:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:07 executing program 1: timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:07 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:05:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 21:05:07 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:07 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 21:05:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:08 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b", 0x4a) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:10 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 21:05:10 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:10 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a0", 0x6f) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:10 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:10 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:10 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:10 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a0", 0x6f) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:10 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x1, 0x0) 21:05:10 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:10 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:10 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:10 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:10 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x1, 0x0) 21:05:10 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x1, 0x0) 21:05:10 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:11 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a0", 0x6f) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:11 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) sendmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:05:11 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:11 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:11 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) sendmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:05:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:13 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:13 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) sendmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:05:13 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:13 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:13 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28ae", 0x82) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:13 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:05:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:14 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:14 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:14 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:14 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:14 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28ae", 0x82) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) [ 1820.684748] kworker/u4:4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1820.754868] kworker/u4:4 cpuset=/ mems_allowed=0-1 [ 1820.781928] CPU: 1 PID: 2335 Comm: kworker/u4:4 Not tainted 4.14.169-syzkaller #0 [ 1820.789589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1820.799077] Workqueue: events_unbound call_usermodehelper_exec_work [ 1820.805494] Call Trace: [ 1820.808112] dump_stack+0x142/0x197 [ 1820.811759] dump_header+0x177/0x6cd [ 1820.815489] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1820.820604] ? ___ratelimit+0x55/0x537 [ 1820.824516] oom_kill_process.cold+0x10/0xadd [ 1820.829026] ? rcu_read_unlock_special+0x895/0xd40 [ 1820.833973] ? lock_downgrade+0x740/0x740 [ 1820.838144] out_of_memory+0x2ee/0x1180 [ 1820.842290] ? lock_acquire+0x16f/0x430 [ 1820.846576] ? oom_killer_disable+0x1d0/0x1d0 [ 1820.851080] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1820.856034] __alloc_pages_slowpath+0x2251/0x2930 [ 1820.861028] ? warn_alloc+0xf0/0xf0 [ 1820.864688] ? __might_sleep+0x93/0xb0 [ 1820.868586] __alloc_pages_nodemask+0x62c/0x7a0 [ 1820.873274] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1820.878310] cache_grow_begin+0x80/0x400 [ 1820.882381] ? __cpuset_node_allowed+0xff/0x450 [ 1820.887203] fallback_alloc+0x1fd/0x2c0 [ 1820.891193] ____cache_alloc_node+0x1be/0x1d0 [ 1820.895712] kmem_cache_alloc_node+0xe3/0x780 [ 1820.900232] copy_process.part.0+0x17d5/0x6a70 [ 1820.904837] ? __lock_acquire+0x5f7/0x4620 [ 1820.909085] ? __lock_acquire+0x5f7/0x4620 [ 1820.913329] ? kmem_cache_free+0x83/0x2b0 [ 1820.917499] ? inotify_free_mark+0x38/0x50 [ 1820.921751] ? fsnotify_final_mark_destroy+0x7c/0xc0 [ 1820.926963] ? trace_hardirqs_on+0x10/0x10 [ 1820.931215] ? umh_complete+0x90/0x90 [ 1820.935032] ? __cleanup_sighand+0x50/0x50 [ 1820.939273] ? kernel_sigaction+0x147/0x210 [ 1820.943626] ? find_held_lock+0x35/0x130 [ 1820.947817] _do_fork+0x19e/0xce0 [ 1820.951389] ? umh_complete+0x90/0x90 [ 1820.955193] ? fork_idle+0x280/0x280 [ 1820.959062] ? trace_hardirqs_on_caller+0x400/0x590 [ 1820.964075] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1820.968563] ? kernel_sigaction+0x147/0x210 [ 1820.972891] ? recalc_sigpending+0xa0/0xa0 [ 1820.977130] ? umh_complete+0x90/0x90 [ 1820.981023] kernel_thread+0x34/0x40 [ 1820.984921] call_usermodehelper_exec_work+0xa4/0x220 [ 1820.990119] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 1820.995669] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1821.001137] process_one_work+0x863/0x1600 [ 1821.005475] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 1821.010150] worker_thread+0x5d9/0x1050 [ 1821.014145] kthread+0x319/0x430 [ 1821.017514] ? process_one_work+0x1600/0x1600 [ 1821.022088] ? kthread_create_on_node+0xd0/0xd0 [ 1821.026760] ret_from_fork+0x24/0x30 [ 1821.128789] Mem-Info: [ 1821.138191] active_anon:764721 inactive_anon:549655 isolated_anon:0 [ 1821.138191] active_file:529 inactive_file:599 isolated_file:36 [ 1821.138191] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1821.138191] slab_reclaimable:22414 slab_unreclaimable:124310 [ 1821.138191] mapped:602190 shmem:610054 pagetables:30440 bounce:0 [ 1821.138191] free:23498 free_pcp:107 free_cma:0 [ 1821.180769] Node 0 active_anon:868876kB inactive_anon:1015456kB active_file:736kB inactive_file:408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1224428kB dirty:32kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1821.317122] Node 1 active_anon:2190008kB inactive_anon:1183164kB active_file:1340kB inactive_file:2548kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:1184232kB dirty:24kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1821.351213] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1821.408700] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1821.435825] Node 0 DMA32 free:28984kB min:36384kB low:45480kB high:54576kB active_anon:867916kB inactive_anon:1011236kB active_file:528kB inactive_file:308kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17728kB pagetables:30524kB bounce:0kB free_pcp:164kB local_pcp:12kB free_cma:0kB [ 1821.565114] lowmem_reserve[]: 0 0 0 0 0 [ 1821.569721] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1821.596104] lowmem_reserve[]: 0 0 0 0 0 [ 1821.601682] Node 1 Normal free:54868kB min:53504kB low:66880kB high:80256kB active_anon:2190008kB inactive_anon:1183164kB active_file:1324kB inactive_file:1820kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23968kB pagetables:91228kB bounce:0kB free_pcp:704kB local_pcp:56kB free_cma:0kB [ 1821.632378] lowmem_reserve[]: 0 0 0 0 0 [ 1821.636658] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1821.671280] Node 0 DMA32: 224*4kB (UME) 1801*8kB (UME) 213*16kB (UME) 21*32kB (UME) 86*64kB (UM) 15*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 29368kB [ 1821.744209] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1821.791719] Node 1 Normal: 555*4kB (UM) 426*8kB (UME) 157*16kB (UME) 55*32kB (UME) 19*64kB (UM) 222*128kB (ME) 57*256kB (ME) 4*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 56172kB [ 1821.872513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1821.921069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1821.971291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1821.980290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1821.989095] 610750 total pagecache pages [ 1822.004203] 0 pages in swap cache [ 1822.007824] Swap cache stats: add 0, delete 0, find 0/0 [ 1822.014292] Free swap = 0kB [ 1822.017816] Total swap = 0kB [ 1822.021697] 1965979 pages RAM [ 1822.026000] 0 pages HighMem/MovableOnly [ 1822.030283] 335855 pages reserved [ 1822.033868] 0 pages cma reserved [ 1822.037479] Out of memory: Kill process 9693 (syz-executor.2) score 1007 or sacrifice child [ 1822.046335] Killed process 9693 (syz-executor.2) total-vm:72984kB, anon-rss:16556kB, file-rss:34912kB, shmem-rss:0kB 21:05:16 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:16 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:16 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:05:16 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:17 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28ae", 0x82) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:17 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:17 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}, {{&(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}}], 0x2, 0x0) 21:05:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:17 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:17 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:20 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:20 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:20 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c", 0x8b) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:20 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:20 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 21:05:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 21:05:20 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, 0x0, 0x0, 0x0) [ 1826.905059] syz-executor.3 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1826.959390] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1826.995449] CPU: 1 PID: 31766 Comm: syz-executor.3 Not tainted 4.14.169-syzkaller #0 [ 1827.003557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1827.012926] Call Trace: [ 1827.015532] dump_stack+0x142/0x197 [ 1827.019176] dump_header+0x177/0x6cd [ 1827.022904] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1827.028153] ? ___ratelimit+0x55/0x537 [ 1827.032182] oom_kill_process.cold+0x10/0xadd [ 1827.036689] ? rcu_read_unlock_special+0x639/0xd40 [ 1827.041848] ? lock_downgrade+0x740/0x740 [ 1827.046030] out_of_memory+0x2ee/0x1180 [ 1827.050261] ? lock_acquire+0x16f/0x430 [ 1827.054259] ? oom_killer_disable+0x1d0/0x1d0 [ 1827.058825] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1827.063799] __alloc_pages_slowpath+0x2251/0x2930 [ 1827.068660] ? kasan_kmalloc+0xce/0xf0 [ 1827.072566] ? warn_alloc+0xf0/0xf0 [ 1827.076343] ? __might_sleep+0x93/0xb0 [ 1827.080395] __alloc_pages_nodemask+0x62c/0x7a0 [ 1827.085101] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1827.090135] ? rcu_read_lock_sched_held+0x110/0x130 [ 1827.095166] ? kasan_unpoison_shadow+0x35/0x50 [ 1827.099740] alloc_pages_current+0xec/0x1e0 [ 1827.104175] __vmalloc_node_range+0x3e9/0x6a0 [ 1827.108689] vzalloc+0x46/0x50 [ 1827.111899] ? xt_counters_alloc+0x34/0x60 [ 1827.116125] xt_counters_alloc+0x34/0x60 [ 1827.120184] __do_replace+0x81/0x5b0 [ 1827.123906] ? compat_do_ipt_get_ctl+0x7f0/0x7f0 [ 1827.128675] ? _copy_from_user+0x99/0x110 [ 1827.133007] do_ipt_set_ctl+0x296/0x3ee [ 1827.137077] ? compat_do_ipt_set_ctl+0x150/0x150 [ 1827.141961] ? mutex_unlock+0xd/0x10 [ 1827.145773] ? nf_sockopt_find.constprop.0+0x1b7/0x230 [ 1827.151075] nf_setsockopt+0x67/0xc0 [ 1827.154793] ip_setsockopt+0x9b/0xb0 [ 1827.158513] tcp_setsockopt+0x84/0xd0 [ 1827.162317] sock_common_setsockopt+0x94/0xd0 [ 1827.166807] SyS_setsockopt+0x13c/0x210 [ 1827.170800] ? SyS_recv+0x40/0x40 [ 1827.174246] ? do_syscall_64+0x53/0x640 [ 1827.178243] ? SyS_recv+0x40/0x40 [ 1827.181691] do_syscall_64+0x1e8/0x640 [ 1827.185680] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1827.190647] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1827.195833] RIP: 0033:0x45deca [ 1827.199026] RSP: 002b:00007ffdd0b8f5a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 1827.206857] RAX: ffffffffffffffda RBX: 00007ffdd0b8f5d0 RCX: 000000000045deca [ 1827.214143] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1827.221428] RBP: 000000000071de80 R08: 00000000000002d8 R09: 0000000000004000 [ 1827.228715] R10: 000000000071bd20 R11: 0000000000000202 R12: 0000000000000003 [ 1827.235985] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000071bcc0 [ 1827.857499] Mem-Info: [ 1827.870163] active_anon:765923 inactive_anon:549654 isolated_anon:0 [ 1827.870163] active_file:36 inactive_file:49 isolated_file:0 [ 1827.870163] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1827.870163] slab_reclaimable:22428 slab_unreclaimable:124694 [ 1827.870163] mapped:601328 shmem:610054 pagetables:30574 bounce:0 [ 1827.870163] free:22711 free_pcp:8 free_cma:0 [ 1827.924249] Node 0 active_anon:868568kB inactive_anon:1015464kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:1223768kB dirty:28kB writeback:0kB shmem:1148352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1827.957358] Node 1 active_anon:2195124kB inactive_anon:1183152kB active_file:40kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1181544kB dirty:12kB writeback:0kB shmem:1291864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1827.988225] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1828.035517] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1828.065989] Node 0 DMA32 free:30136kB min:36384kB low:45480kB high:54576kB active_anon:867608kB inactive_anon:1011244kB active_file:104kB inactive_file:0kB unevictable:0kB writepending:28kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17952kB pagetables:30932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1828.130756] lowmem_reserve[]: 0 0 0 0 0 [ 1828.134806] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1828.170114] lowmem_reserve[]: 0 0 0 0 0 [ 1828.174156] Node 1 Normal free:50956kB min:53504kB low:66880kB high:80256kB active_anon:2195124kB inactive_anon:1183152kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24032kB pagetables:91356kB bounce:0kB free_pcp:24kB local_pcp:20kB free_cma:0kB [ 1828.206966] lowmem_reserve[]: 0 0 0 0 0 [ 1828.213047] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1828.240313] Node 0 DMA32: 417*4kB (UME) 1949*8kB (UME) 161*16kB (UME) 11*32kB (UME) 92*64kB (UM) 15*128kB (UM) 3*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 30300kB [ 1828.258931] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1828.269784] Node 1 Normal: 1018*4kB (UME) 355*8kB (UME) 90*16kB (UME) 11*32kB (UME) 12*64kB (UME) 217*128kB (M) 52*256kB (ME) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 51072kB [ 1828.286472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1828.295581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1828.315600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1828.327481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1828.338647] 610089 total pagecache pages [ 1828.342808] 0 pages in swap cache [ 1828.346264] Swap cache stats: add 0, delete 0, find 0/0 [ 1828.351693] Free swap = 0kB [ 1828.354728] Total swap = 0kB [ 1828.357756] 1965979 pages RAM [ 1828.360927] 0 pages HighMem/MovableOnly [ 1828.364910] 335855 pages reserved [ 1828.368368] 0 pages cma reserved [ 1828.373926] Out of memory: Kill process 9785 (syz-executor.4) score 1007 or sacrifice child [ 1828.418082] syz-executor.5 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1828.435237] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 1828.441326] CPU: 1 PID: 7390 Comm: syz-executor.5 Not tainted 4.14.169-syzkaller #0 [ 1828.449127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1828.458491] Call Trace: [ 1828.461101] dump_stack+0x142/0x197 [ 1828.464749] dump_header+0x177/0x6cd [ 1828.468477] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1828.473599] ? ___ratelimit+0x55/0x537 [ 1828.477509] oom_kill_process.cold+0x10/0xadd [ 1828.482020] ? oom_unkillable_task+0x294/0x390 [ 1828.486624] ? lock_downgrade+0x740/0x740 [ 1828.490787] out_of_memory+0x2ee/0x1180 [ 1828.494768] ? lock_acquire+0x16f/0x430 [ 1828.498767] ? oom_killer_disable+0x1d0/0x1d0 [ 1828.503279] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1828.508487] __alloc_pages_slowpath+0x2251/0x2930 [ 1828.513357] ? kasan_kmalloc+0xce/0xf0 [ 1828.518568] ? warn_alloc+0xf0/0xf0 [ 1828.522342] ? __might_sleep+0x93/0xb0 [ 1828.526247] __alloc_pages_nodemask+0x62c/0x7a0 [ 1828.531150] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1828.536294] ? rcu_read_lock_sched_held+0x110/0x130 [ 1828.541344] ? kasan_unpoison_shadow+0x35/0x50 [ 1828.545954] alloc_pages_current+0xec/0x1e0 [ 1828.550400] __vmalloc_node_range+0x3e9/0x6a0 [ 1828.554913] vzalloc+0x46/0x50 [ 1828.558119] ? alloc_counters.isra.0+0x48/0x90 [ 1828.562868] alloc_counters.isra.0+0x48/0x90 [ 1828.567296] do_ipt_get_ctl+0x439/0x7e0 [ 1828.571282] ? save_trace+0x290/0x290 [ 1828.575087] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1828.580045] ? alloc_counters.isra.0+0x90/0x90 [ 1828.584648] ? find_held_lock+0x35/0x130 [ 1828.588730] ? wait_for_completion+0x420/0x420 [ 1828.593434] ? mutex_unlock+0xd/0x10 [ 1828.597161] ? nf_sockopt_find.constprop.0+0x1b7/0x230 [ 1828.602456] nf_getsockopt+0x6a/0xc0 [ 1828.606178] ip_getsockopt+0x10d/0x150 [ 1828.610083] ? do_ip_getsockopt+0x1550/0x1550 [ 1828.615997] tcp_getsockopt+0x84/0xd0 [ 1828.619811] sock_common_getsockopt+0x94/0xd0 [ 1828.624320] SyS_getsockopt+0x126/0x1e0 [ 1828.628305] ? SyS_setsockopt+0x210/0x210 [ 1828.632564] ? do_syscall_64+0x53/0x640 [ 1828.636557] ? SyS_setsockopt+0x210/0x210 [ 1828.640720] do_syscall_64+0x1e8/0x640 [ 1828.644623] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1828.649487] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1828.654692] RIP: 0033:0x45deaa [ 1828.657884] RSP: 002b:00007fff26f35b68 EFLAGS: 00000202 ORIG_RAX: 0000000000000037 [ 1828.665617] RAX: ffffffffffffffda RBX: 00007fff26f35b90 RCX: 000000000045deaa [ 1828.672904] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 1828.680186] RBP: 000000000071de80 R08: 00007fff26f35b8c R09: 0000000000004000 [ 1828.687468] R10: 00007fff26f35c90 R11: 0000000000000202 R12: 0000000000000003 [ 1828.694836] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000071d100 [ 1828.717833] Mem-Info: [ 1828.740351] active_anon:765923 inactive_anon:549654 isolated_anon:0 [ 1828.740351] active_file:12 inactive_file:12 isolated_file:3 [ 1828.740351] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1828.740351] slab_reclaimable:22428 slab_unreclaimable:124657 [ 1828.740351] mapped:601269 shmem:610054 pagetables:30574 bounce:0 [ 1828.740351] free:22942 free_pcp:0 free_cma:0 [ 1828.781302] Node 0 active_anon:868568kB inactive_anon:1015464kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1828.809729] Node 1 active_anon:2195124kB inactive_anon:1183152kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:1181452kB dirty:0kB writeback:0kB shmem:1291864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1828.838660] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1828.877743] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1828.882895] Node 0 DMA32 free:30280kB min:36384kB low:45480kB high:54576kB active_anon:867608kB inactive_anon:1011244kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17952kB pagetables:30932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1828.919595] lowmem_reserve[]: 0 0 0 0 0 [ 1828.923686] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1828.949026] lowmem_reserve[]: 0 0 0 0 0 [ 1828.953147] Node 1 Normal free:51060kB min:53504kB low:66880kB high:80256kB active_anon:2195124kB inactive_anon:1183152kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24032kB pagetables:91356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1828.984732] lowmem_reserve[]: 0 0 0 0 0 [ 1828.988764] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1829.089642] Node 0 DMA32: 417*4kB (UME) 1949*8kB (UME) 161*16kB (UME) 11*32kB (UME) 92*64kB (UM) 15*128kB (UM) 3*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 30300kB [ 1829.127333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1829.197489] Node 1 Normal: 1018*4kB (UME) 355*8kB (UME) 90*16kB (UME) 10*32kB (UME) 12*64kB (UME) 217*128kB (M) 52*256kB (ME) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 51040kB [ 1829.346615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.439704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1829.500814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.509827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1829.690123] 610079 total pagecache pages [ 1829.694245] 0 pages in swap cache [ 1829.697701] Swap cache stats: add 0, delete 0, find 0/0 [ 1829.823254] Free swap = 0kB [ 1829.826339] Total swap = 0kB [ 1829.829395] 1965979 pages RAM [ 1829.900251] 0 pages HighMem/MovableOnly [ 1829.904392] 335855 pages reserved [ 1829.907856] 0 pages cma reserved [ 1830.005368] Out of memory: Kill process 9714 (syz-executor.2) score 1007 or sacrifice child [ 1830.062681] Killed process 9714 (syz-executor.2) total-vm:72984kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB [ 1830.273851] oom_reaper: reaped process 9714 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:05:25 executing program 4: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:25 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c", 0x8b) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:25 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:25 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, 0x0, 0x0, 0x0) 21:05:25 executing program 4: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 21:05:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, 0x0, 0x0, 0x0) 21:05:26 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:26 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c", 0x8b) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:26 executing program 4: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 21:05:26 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80), 0x0, 0x0) [ 1834.714896] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1834.770060] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1834.775549] CPU: 1 PID: 9866 Comm: syz-executor.3 Not tainted 4.14.169-syzkaller #0 [ 1834.783491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1834.793051] Call Trace: [ 1834.795763] dump_stack+0x142/0x197 [ 1834.799438] dump_header+0x177/0x6cd [ 1834.803166] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1834.808282] ? ___ratelimit+0x55/0x537 [ 1834.812192] oom_kill_process.cold+0x10/0xadd [ 1834.816702] ? rcu_read_unlock_special+0x895/0xd40 [ 1834.821649] ? lock_downgrade+0x740/0x740 [ 1834.825819] out_of_memory+0x2ee/0x1180 [ 1834.829804] ? lock_acquire+0x16f/0x430 [ 1834.833799] ? oom_killer_disable+0x1d0/0x1d0 [ 1834.838308] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1834.843361] __alloc_pages_slowpath+0x2251/0x2930 [ 1834.848258] ? warn_alloc+0xf0/0xf0 [ 1834.851952] ? __might_sleep+0x93/0xb0 [ 1834.855854] __alloc_pages_nodemask+0x62c/0x7a0 [ 1834.860589] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1834.865632] ? ____cache_alloc_node+0x1be/0x1d0 [ 1834.870313] ? cache_grow_begin+0x335/0x400 [ 1834.874660] cache_grow_begin+0x80/0x400 [ 1834.878742] ? __cpuset_node_allowed+0xff/0x450 [ 1834.883527] fallback_alloc+0x1fd/0x2c0 [ 1834.887682] ____cache_alloc_node+0x1be/0x1d0 [ 1834.892200] kmem_cache_alloc+0x1f3/0x780 [ 1834.896368] getname_flags+0xcb/0x580 [ 1834.900183] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1834.905759] getname+0x1a/0x20 [ 1834.908966] do_sys_open+0x1e7/0x430 [ 1834.912697] ? filp_open+0x70/0x70 [ 1834.916358] ? SyS_symlink+0x131/0x210 [ 1834.920268] SyS_open+0x2d/0x40 [ 1834.923663] ? do_sys_open+0x430/0x430 [ 1834.927569] do_syscall_64+0x1e8/0x640 [ 1834.931463] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1834.936322] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1834.941624] RIP: 0033:0x415110 [ 1834.944814] RSP: 002b:00007ffdd0b8f828 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1834.952655] RAX: ffffffffffffffda RBX: 00007ffdd0b8f854 RCX: 0000000000415110 [ 1834.959942] RDX: 00007ffdd0b8f85a RSI: 0000000000080001 RDI: 00000000004c0f6c [ 1834.967223] RBP: 00007ffdd0b8f850 R08: 0000000000000000 R09: 0000000000000004 [ 1834.974510] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000004c0f6c [ 1834.981793] R13: 00007ffdd0b8fd70 R14: 0000000000000000 R15: 00007ffdd0b8fd80 [ 1835.030445] Mem-Info: [ 1835.032926] active_anon:764676 inactive_anon:549653 isolated_anon:0 [ 1835.032926] active_file:115 inactive_file:211 isolated_file:55 [ 1835.032926] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1835.032926] slab_reclaimable:22434 slab_unreclaimable:124806 [ 1835.032926] mapped:601616 shmem:610054 pagetables:30618 bounce:0 [ 1835.032926] free:23292 free_pcp:200 free_cma:0 [ 1835.072223] Node 0 active_anon:871536kB inactive_anon:1015456kB active_file:40kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223744kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1835.105729] Node 1 active_anon:2187168kB inactive_anon:1183156kB active_file:360kB inactive_file:864kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1182592kB dirty:28kB writeback:4kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1835.146775] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1835.219342] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1835.224642] Node 0 DMA32 free:27280kB min:36384kB low:45480kB high:54576kB active_anon:870584kB inactive_anon:1011236kB active_file:32kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:17984kB pagetables:30740kB bounce:0kB free_pcp:172kB local_pcp:4kB free_cma:0kB [ 1835.260518] lowmem_reserve[]: 0 0 0 0 0 [ 1835.300249] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1835.335682] lowmem_reserve[]: 0 0 0 0 0 [ 1835.339725] Node 1 Normal free:56844kB min:53504kB low:66880kB high:80256kB active_anon:2187184kB inactive_anon:1183156kB active_file:324kB inactive_file:268kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:23968kB pagetables:91724kB bounce:0kB free_pcp:88kB local_pcp:0kB free_cma:0kB [ 1835.375807] lowmem_reserve[]: 0 0 0 0 0 [ 1835.379973] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1835.401166] Node 0 DMA32: 238*4kB (UME) 1836*8kB (UME) 155*16kB (UME) 8*32kB (UME) 79*64kB (UM) 14*128kB (M) 3*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27528kB [ 1835.422132] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1835.442827] Node 1 Normal: 477*4kB (UME) 156*8kB (UM) 164*16kB (UM) 72*32kB (UME) 114*64kB (UM) 216*128kB (UM) 49*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55572kB [ 1835.464628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.476025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.489036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.499900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.524340] 610630 total pagecache pages [ 1835.530596] 0 pages in swap cache [ 1835.540175] Swap cache stats: add 0, delete 0, find 0/0 [ 1835.545573] Free swap = 0kB [ 1835.548588] Total swap = 0kB [ 1835.560092] 1965979 pages RAM [ 1835.563238] 0 pages HighMem/MovableOnly [ 1835.567216] 335855 pages reserved [ 1835.591332] 0 pages cma reserved [ 1835.594855] Out of memory: Kill process 9808 (syz-executor.4) score 1007 or sacrifice child [ 1835.610178] Killed process 9808 (syz-executor.4) total-vm:72984kB, anon-rss:16552kB, file-rss:34816kB, shmem-rss:0kB [ 1835.700824] oom_reaper: reaped process 9808 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:05:30 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139e", 0x90) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:30 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:30 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:30 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:30 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80), 0x0, 0x0) 21:05:30 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b331454c691db"}}}}}}}, 0x0) 21:05:30 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:30 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80), 0x0, 0x0) 21:05:30 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b331454c691db"}}}}}}}, 0x0) 21:05:31 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:31 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139e", 0x90) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:31 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b331454c691db"}}}}}}}, 0x0) [ 1838.368462] kworker/u4:3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1838.412500] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 1838.417497] CPU: 0 PID: 22830 Comm: kworker/u4:3 Not tainted 4.14.169-syzkaller #0 [ 1838.425307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1838.434664] Workqueue: events_unbound call_usermodehelper_exec_work [ 1838.441240] Call Trace: [ 1838.443833] dump_stack+0x142/0x197 [ 1838.447541] dump_header+0x177/0x6cd [ 1838.451258] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1838.456353] ? ___ratelimit+0x55/0x537 [ 1838.460338] oom_kill_process.cold+0x10/0xadd [ 1838.464827] ? rcu_read_unlock_special+0x895/0xd40 [ 1838.469753] ? lock_downgrade+0x740/0x740 [ 1838.473921] out_of_memory+0x2ee/0x1180 [ 1838.478003] ? lock_acquire+0x16f/0x430 [ 1838.481996] ? oom_killer_disable+0x1d0/0x1d0 [ 1838.486523] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1838.491515] __alloc_pages_slowpath+0x2251/0x2930 [ 1838.496903] ? warn_alloc+0xf0/0xf0 [ 1838.500584] ? __might_sleep+0x93/0xb0 [ 1838.504506] __alloc_pages_nodemask+0x62c/0x7a0 [ 1838.509174] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1838.514196] ? cache_grow_begin+0x335/0x400 [ 1838.518521] cache_grow_begin+0x80/0x400 [ 1838.522578] ? __cpuset_node_allowed+0xff/0x450 [ 1838.527461] fallback_alloc+0x1fd/0x2c0 [ 1838.531551] ____cache_alloc_node+0x1be/0x1d0 [ 1838.536052] kmem_cache_alloc_node+0xe3/0x780 [ 1838.540563] copy_process.part.0+0x17d5/0x6a70 [ 1838.545250] ? __lock_acquire+0x5f7/0x4620 [ 1838.549493] ? __lock_acquire+0x5f7/0x4620 [ 1838.553750] ? trace_hardirqs_on+0x10/0x10 [ 1838.557979] ? umh_complete+0x90/0x90 [ 1838.561771] ? __cleanup_sighand+0x50/0x50 [ 1838.565999] ? kernel_sigaction+0x147/0x210 [ 1838.570342] ? find_held_lock+0x35/0x130 [ 1838.574408] _do_fork+0x19e/0xce0 [ 1838.577850] ? umh_complete+0x90/0x90 [ 1838.581650] ? fork_idle+0x280/0x280 [ 1838.585453] ? trace_hardirqs_on_caller+0x400/0x590 [ 1838.590534] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1838.595021] ? kernel_sigaction+0x147/0x210 [ 1838.599852] ? recalc_sigpending+0xa0/0xa0 [ 1838.604091] ? umh_complete+0x90/0x90 [ 1838.607914] kernel_thread+0x34/0x40 [ 1838.611717] call_usermodehelper_exec_work+0xa4/0x220 [ 1838.616906] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 1838.622539] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1838.627998] process_one_work+0x863/0x1600 [ 1838.632233] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 1838.636984] worker_thread+0x5d9/0x1050 [ 1838.640968] kthread+0x319/0x430 [ 1838.644350] ? process_one_work+0x1600/0x1600 [ 1838.649103] ? kthread_create_on_node+0xd0/0xd0 [ 1838.653773] ret_from_fork+0x24/0x30 [ 1838.679762] Mem-Info: [ 1838.682745] active_anon:764768 inactive_anon:549653 isolated_anon:0 [ 1838.682745] active_file:21 inactive_file:17 isolated_file:26 [ 1838.682745] unevictable:0 dirty:4 writeback:25 unstable:0 [ 1838.682745] slab_reclaimable:22456 slab_unreclaimable:124985 [ 1838.682745] mapped:601296 shmem:610054 pagetables:30788 bounce:0 [ 1838.682745] free:23218 free_pcp:44 free_cma:0 [ 1838.732112] Node 0 active_anon:871468kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1838.760552] Node 1 active_anon:2187604kB inactive_anon:1183156kB active_file:84kB inactive_file:464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1181760kB dirty:16kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1838.789440] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1838.816284] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1838.821851] Node 0 DMA32 free:27404kB min:36384kB low:45480kB high:54576kB active_anon:870508kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18048kB pagetables:30652kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1838.855130] lowmem_reserve[]: 0 0 0 0 0 [ 1838.859373] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1838.885421] lowmem_reserve[]: 0 0 0 0 0 [ 1838.889623] Node 1 Normal free:55040kB min:53504kB low:66880kB high:80256kB active_anon:2187604kB inactive_anon:1183156kB active_file:400kB inactive_file:168kB unevictable:0kB writepending:116kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24096kB pagetables:92492kB bounce:0kB free_pcp:520kB local_pcp:88kB free_cma:0kB [ 1838.920053] lowmem_reserve[]: 0 0 0 0 0 [ 1838.924316] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1838.940449] Node 0 DMA32: 261*4kB (UE) 1819*8kB (UME) 146*16kB (UE) 6*32kB (UE) 81*64kB (UM) 14*128kB (M) 3*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27404kB [ 1838.956276] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1838.967442] Node 1 Normal: 323*4kB (UME) 131*8kB (UME) 38*16kB (UME) 109*32kB (UMEH) 135*64kB (UMEH) 214*128kB (UM) 47*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54500kB [ 1838.986088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1838.995544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1839.004570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1839.013867] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1839.022762] 610142 total pagecache pages [ 1839.027085] 0 pages in swap cache [ 1839.030999] Swap cache stats: add 0, delete 0, find 0/0 [ 1839.036753] Free swap = 0kB [ 1839.040275] Total swap = 0kB [ 1839.043501] 1965979 pages RAM [ 1839.046812] 0 pages HighMem/MovableOnly [ 1839.051039] 335855 pages reserved [ 1839.054658] 0 pages cma reserved [ 1839.058204] Out of memory: Kill process 21753 (syz-executor.0) score 1007 or sacrifice child [ 1839.067161] Killed process 21753 (syz-executor.0) total-vm:72984kB, anon-rss:16540kB, file-rss:34816kB, shmem-rss:0kB [ 1839.145488] oom_reaper: reaped process 21753 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:05:33 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:33 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139e", 0x90) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:33 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:33 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:05:33 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b331454c691db"}}}}}}}, 0x0) [ 1840.091032] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1840.156479] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1840.220099] CPU: 0 PID: 31766 Comm: syz-executor.3 Not tainted 4.14.169-syzkaller #0 [ 1840.228893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1840.238360] Call Trace: [ 1840.240952] dump_stack+0x142/0x197 [ 1840.244588] dump_header+0x177/0x6cd [ 1840.248305] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1840.253415] ? ___ratelimit+0x55/0x537 [ 1840.257311] oom_kill_process.cold+0x10/0xadd [ 1840.261843] ? rcu_read_unlock_special+0x895/0xd40 [ 1840.266780] ? lock_downgrade+0x740/0x740 [ 1840.270930] out_of_memory+0x2ee/0x1180 [ 1840.274903] ? lock_acquire+0x16f/0x430 [ 1840.278890] ? oom_killer_disable+0x1d0/0x1d0 [ 1840.283388] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1840.288323] __alloc_pages_slowpath+0x2251/0x2930 [ 1840.293183] ? warn_alloc+0xf0/0xf0 [ 1840.296817] ? __might_sleep+0x93/0xb0 [ 1840.300693] __alloc_pages_nodemask+0x62c/0x7a0 [ 1840.305399] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1840.310414] ? rcu_read_lock_sched_held+0x110/0x130 [ 1840.315433] copy_process.part.0+0x26a/0x6a70 [ 1840.319961] ? trace_hardirqs_on+0x10/0x10 [ 1840.324237] ? save_trace+0x290/0x290 [ 1840.328045] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1840.333082] ? __might_fault+0x110/0x1d0 [ 1840.337136] ? find_held_lock+0x35/0x130 [ 1840.341204] ? __cleanup_sighand+0x50/0x50 [ 1840.345449] ? lock_downgrade+0x740/0x740 [ 1840.349643] _do_fork+0x19e/0xce0 [ 1840.353234] ? fork_idle+0x280/0x280 [ 1840.356945] ? put_timespec64+0xb4/0x100 [ 1840.361000] ? nsecs_to_jiffies+0x30/0x30 [ 1840.365155] ? SyS_clock_gettime+0xf8/0x180 [ 1840.369482] SyS_clone+0x37/0x50 [ 1840.373235] ? sys_vfork+0x30/0x30 [ 1840.376788] do_syscall_64+0x1e8/0x640 [ 1840.380668] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1840.385554] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1840.390887] RIP: 0033:0x45996a [ 1840.394086] RSP: 002b:00007ffdd0b8fcf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1840.401807] RAX: ffffffffffffffda RBX: 00007ffdd0b8fcf0 RCX: 000000000045996a [ 1840.409084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1840.416512] RBP: 00007ffdd0b8fd30 R08: 0000000000000001 R09: 000000000140d940 [ 1840.423788] R10: 000000000140dc10 R11: 0000000000000246 R12: 0000000000000001 [ 1840.431080] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdd0b8fd80 [ 1840.697012] Mem-Info: [ 1840.699484] active_anon:764776 inactive_anon:549653 isolated_anon:0 [ 1840.699484] active_file:420 inactive_file:409 isolated_file:53 [ 1840.699484] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1840.699484] slab_reclaimable:22467 slab_unreclaimable:125454 [ 1840.699484] mapped:602064 shmem:610054 pagetables:30755 bounce:0 [ 1840.699484] free:21848 free_pcp:209 free_cma:0 [ 1840.735633] Node 0 active_anon:871316kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1840.769381] Node 1 active_anon:2187788kB inactive_anon:1183156kB active_file:1480kB inactive_file:1512kB unevictable:0kB isolated(anon):0kB isolated(file):212kB mapped:1184532kB dirty:92kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1840.807465] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1840.866060] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1840.871810] Node 0 DMA32 free:27580kB min:36384kB low:45480kB high:54576kB active_anon:870356kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18048kB pagetables:30652kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1840.912608] lowmem_reserve[]: 0 0 0 0 0 [ 1840.916937] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1840.953683] lowmem_reserve[]: 0 0 0 0 0 [ 1840.957730] Node 1 Normal free:50896kB min:53504kB low:66880kB high:80256kB active_anon:2187788kB inactive_anon:1183156kB active_file:1136kB inactive_file:1136kB unevictable:0kB writepending:292kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24128kB pagetables:92360kB bounce:0kB free_pcp:276kB local_pcp:8kB free_cma:0kB [ 1841.039243] lowmem_reserve[]: 0 0 0 0 0 [ 1841.043558] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1841.064751] Node 0 DMA32: 331*4kB (UME) 1924*8kB (UME) 155*16kB (UE) 8*32kB (UE) 64*64kB (UM) 14*128kB (M) 3*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27644kB [ 1841.090109] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1841.143080] Node 1 Normal: 906*4kB (UME) 302*8kB (UME) 127*16kB (UMEH) 65*32kB (UMEH) 24*64kB (UMEH) 209*128kB (UM) 53*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53032kB [ 1841.179860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1841.206511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1841.226743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1841.246952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1841.261329] 610271 total pagecache pages [ 1841.265683] 0 pages in swap cache [ 1841.271534] Swap cache stats: add 0, delete 0, find 0/0 [ 1841.276942] Free swap = 0kB [ 1841.282262] Total swap = 0kB [ 1841.285314] 1965979 pages RAM [ 1841.288620] 0 pages HighMem/MovableOnly [ 1841.300153] 335855 pages reserved [ 1841.322023] 0 pages cma reserved [ 1841.338249] Out of memory: Kill process 9930 (syz-executor.4) score 1007 or sacrifice child [ 1841.617194] kworker/u4:3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1841.639651] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 1841.644919] CPU: 1 PID: 22830 Comm: kworker/u4:3 Not tainted 4.14.169-syzkaller #0 [ 1841.652643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1841.662362] Workqueue: events_unbound call_usermodehelper_exec_work [ 1841.668958] Call Trace: [ 1841.671577] dump_stack+0x142/0x197 [ 1841.675259] dump_header+0x177/0x6cd [ 1841.678990] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1841.684111] ? ___ratelimit+0x55/0x537 [ 1841.688019] oom_kill_process.cold+0x10/0xadd [ 1841.692678] ? rcu_read_unlock_special+0x895/0xd40 [ 1841.697640] ? lock_downgrade+0x740/0x740 [ 1841.701825] out_of_memory+0x2ee/0x1180 [ 1841.706043] ? lock_acquire+0x16f/0x430 [ 1841.710159] ? oom_killer_disable+0x1d0/0x1d0 [ 1841.714928] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1841.719884] __alloc_pages_slowpath+0x2251/0x2930 [ 1841.724770] ? warn_alloc+0xf0/0xf0 [ 1841.728437] ? __might_sleep+0x93/0xb0 [ 1841.732740] __alloc_pages_nodemask+0x62c/0x7a0 [ 1841.737437] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1841.742768] ? rcu_read_lock_sched_held+0x110/0x130 [ 1841.747910] ? save_trace+0x290/0x290 [ 1841.751734] copy_process.part.0+0x26a/0x6a70 [ 1841.757996] ? __lock_acquire+0x5f7/0x4620 [ 1841.762436] ? __lock_acquire+0x5f7/0x4620 [ 1841.766690] ? trace_hardirqs_on+0x10/0x10 [ 1841.770935] ? umh_complete+0x90/0x90 [ 1841.775119] ? __cleanup_sighand+0x50/0x50 [ 1841.779471] ? kernel_sigaction+0x147/0x210 [ 1841.783976] ? find_held_lock+0x35/0x130 [ 1841.788254] _do_fork+0x19e/0xce0 [ 1841.791936] ? umh_complete+0x90/0x90 [ 1841.796030] ? fork_idle+0x280/0x280 [ 1841.800001] ? trace_hardirqs_on_caller+0x400/0x590 [ 1841.805560] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1841.810270] ? kernel_sigaction+0x147/0x210 [ 1841.814774] ? recalc_sigpending+0xa0/0xa0 [ 1841.819238] ? umh_complete+0x90/0x90 [ 1841.823056] kernel_thread+0x34/0x40 [ 1841.826975] call_usermodehelper_exec_work+0xa4/0x220 [ 1841.832368] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 1841.838309] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1841.844121] process_one_work+0x863/0x1600 [ 1841.848791] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 1841.853617] worker_thread+0x5d9/0x1050 [ 1841.857626] kthread+0x319/0x430 [ 1841.861012] ? process_one_work+0x1600/0x1600 [ 1841.865533] ? kthread_create_on_node+0xd0/0xd0 [ 1841.870489] ret_from_fork+0x24/0x30 [ 1841.892460] Mem-Info: [ 1841.898614] active_anon:764776 inactive_anon:549653 isolated_anon:0 [ 1841.898614] active_file:29 inactive_file:12 isolated_file:25 [ 1841.898614] unevictable:0 dirty:7 writeback:1 unstable:0 [ 1841.898614] slab_reclaimable:22467 slab_unreclaimable:125454 [ 1841.898614] mapped:601278 shmem:610054 pagetables:30755 bounce:0 [ 1841.898614] free:22872 free_pcp:0 free_cma:0 [ 1841.934102] Node 0 active_anon:871316kB inactive_anon:1015456kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:4kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1841.963318] Node 1 active_anon:2187788kB inactive_anon:1183156kB active_file:412kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1181888kB dirty:24kB writeback:4kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1841.993494] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1842.026697] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1842.032000] Node 0 DMA32 free:27640kB min:36384kB low:45480kB high:54576kB active_anon:870356kB inactive_anon:1011236kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18048kB pagetables:30652kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1842.063963] lowmem_reserve[]: 0 0 0 0 0 [ 1842.068517] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1842.094953] lowmem_reserve[]: 0 0 0 0 0 [ 1842.103495] Node 1 Normal free:54160kB min:53504kB low:66880kB high:80256kB active_anon:2187788kB inactive_anon:1183156kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24000kB pagetables:92360kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 1842.134560] lowmem_reserve[]: 0 0 0 0 0 [ 1842.138864] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1842.161751] Node 0 DMA32: 330*4kB (UME) 1924*8kB (UME) 155*16kB (UE) 8*32kB (UE) 64*64kB (UM) 14*128kB (M) 3*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27640kB [ 1842.195253] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1842.216917] Node 1 Normal: 773*4kB (UME) 363*8kB (UME) 127*16kB (UMEH) 78*32kB (UMEH) 30*64kB (UMEH) 209*128kB (UM) 53*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53788kB [ 1842.234855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1842.248297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1842.257812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1842.267473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1842.314490] 610286 total pagecache pages [ 1842.319061] 0 pages in swap cache [ 1842.322759] Swap cache stats: add 0, delete 0, find 0/0 [ 1842.328456] Free swap = 0kB [ 1842.344333] Total swap = 0kB [ 1842.347804] 1965979 pages RAM [ 1842.351127] 0 pages HighMem/MovableOnly [ 1842.355371] 335855 pages reserved [ 1842.358945] 0 pages cma reserved [ 1842.362752] Out of memory: Kill process 9950 (syz-executor.4) score 1007 or sacrifice child [ 1842.371627] Killed process 9950 (syz-executor.4) total-vm:73116kB, anon-rss:16560kB, file-rss:34836kB, shmem-rss:0kB [ 1842.465944] oom_reaper: reaped process 9950 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:05:36 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:05:37 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:36 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 21:05:37 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:05:37 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 21:05:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:37 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:37 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30", 0x92) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:38 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 21:05:38 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:38 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) [ 1845.448544] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1845.466710] modprobe cpuset=/ mems_allowed=0-1 [ 1845.472811] CPU: 0 PID: 9983 Comm: modprobe Not tainted 4.14.169-syzkaller #0 [ 1845.480745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1845.490410] Call Trace: [ 1845.493112] dump_stack+0x142/0x197 [ 1845.496762] dump_header+0x177/0x6cd [ 1845.500589] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1845.505800] ? ___ratelimit+0x55/0x537 [ 1845.509906] oom_kill_process.cold+0x10/0xadd [ 1845.514513] ? rcu_read_unlock_special+0x639/0xd40 [ 1845.519471] ? lock_downgrade+0x740/0x740 [ 1845.524367] out_of_memory+0x2ee/0x1180 [ 1845.528498] ? lock_acquire+0x16f/0x430 [ 1845.532960] ? oom_killer_disable+0x1d0/0x1d0 [ 1845.537851] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1845.543066] __alloc_pages_slowpath+0x2251/0x2930 [ 1845.547956] ? warn_alloc+0xf0/0xf0 [ 1845.552115] ? __might_sleep+0x93/0xb0 [ 1845.556128] __alloc_pages_nodemask+0x62c/0x7a0 [ 1845.560993] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1845.566015] ? ____cache_alloc_node+0x1be/0x1d0 [ 1845.571007] ? cache_grow_begin+0x335/0x400 [ 1845.575334] cache_grow_begin+0x80/0x400 [ 1845.579606] ? __cpuset_node_allowed+0xff/0x450 [ 1845.584467] fallback_alloc+0x1fd/0x2c0 [ 1845.588456] ____cache_alloc_node+0x1be/0x1d0 [ 1845.593063] kmem_cache_alloc+0x1f3/0x780 [ 1845.597249] ? vfs_statx_fd+0xa0/0xa0 [ 1845.601173] getname_flags+0xcb/0x580 [ 1845.605382] ? cp_new_stat+0x5a0/0x5a0 [ 1845.609362] getname+0x1a/0x20 [ 1845.613010] do_sys_open+0x1e7/0x430 [ 1845.616916] ? filp_open+0x70/0x70 [ 1845.620466] SyS_open+0x2d/0x40 [ 1845.623744] ? do_sys_open+0x430/0x430 [ 1845.627651] do_syscall_64+0x1e8/0x640 [ 1845.631927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1845.636982] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1845.642169] RIP: 0033:0x7f15af9ea120 [ 1845.645998] RSP: 002b:00007fff9476fb48 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1845.653880] RAX: ffffffffffffffda RBX: 00007f15afcb5471 RCX: 00007f15af9ea120 [ 1845.661335] RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00007f15afcb5471 [ 1845.668605] RBP: 00007f15afeba2e8 R08: 72656c6c616b7a79 R09: 00007fff94770ca2 [ 1845.676149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1845.683727] R13: 0000000000000000 R14: 0000000000000000 R15: 00055facc785c680 [ 1845.728665] Mem-Info: [ 1845.738808] active_anon:763262 inactive_anon:549651 isolated_anon:0 [ 1845.738808] active_file:553 inactive_file:513 isolated_file:89 [ 1845.738808] unevictable:0 dirty:38 writeback:0 unstable:0 [ 1845.738808] slab_reclaimable:22419 slab_unreclaimable:125623 [ 1845.738808] mapped:602112 shmem:610054 pagetables:30898 bounce:0 [ 1845.738808] free:22720 free_pcp:140 free_cma:0 [ 1845.815871] Node 0 active_anon:871464kB inactive_anon:1015456kB active_file:48kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223668kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1845.886486] Node 1 active_anon:2181584kB inactive_anon:1183148kB active_file:1588kB inactive_file:2592kB unevictable:0kB isolated(anon):0kB isolated(file):308kB mapped:1184980kB dirty:52kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1845.946755] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1845.984750] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1845.991322] Node 0 DMA32 free:27256kB min:36384kB low:45480kB high:54576kB active_anon:870504kB inactive_anon:1011236kB active_file:48kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18112kB pagetables:30648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1846.024641] lowmem_reserve[]: 0 0 0 0 0 [ 1846.031494] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1846.071316] lowmem_reserve[]: 0 0 0 0 0 [ 1846.075662] Node 1 Normal free:53284kB min:53504kB low:66880kB high:80256kB active_anon:2181252kB inactive_anon:1183148kB active_file:1060kB inactive_file:2340kB unevictable:0kB writepending:84kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24480kB pagetables:93028kB bounce:0kB free_pcp:1344kB local_pcp:704kB free_cma:0kB [ 1846.113715] lowmem_reserve[]: 0 0 0 0 0 [ 1846.118746] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1846.136720] Node 0 DMA32: 332*4kB (UME) 1919*8kB (UME) 150*16kB (UE) 6*32kB (UME) 62*64kB (UM) 14*128kB (M) 3*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27336kB [ 1846.180215] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1846.218602] Node 1 Normal: 388*4kB (UMEH) 118*8kB (UMEH) 69*16kB (UMEH) 59*32kB (UMEH) 102*64kB (ME) 226*128kB (M) 55*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55024kB [ 1846.283881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1846.299288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1846.315575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1846.326362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1846.363110] 610309 total pagecache pages [ 1846.367348] 0 pages in swap cache [ 1846.383799] Swap cache stats: add 0, delete 0, find 0/0 [ 1846.389357] Free swap = 0kB [ 1846.425444] Total swap = 0kB [ 1846.428521] 1965979 pages RAM [ 1846.443550] 0 pages HighMem/MovableOnly [ 1846.451101] 335855 pages reserved [ 1846.455180] 0 pages cma reserved [ 1846.458888] Out of memory: Kill process 7751 (syz-executor.0) score 1007 or sacrifice child [ 1846.472345] Killed process 7751 (syz-executor.0) total-vm:73116kB, anon-rss:16560kB, file-rss:34704kB, shmem-rss:0kB 21:05:41 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x0, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b331454c691db"}}}}}}}, 0x0) 21:05:41 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30", 0x92) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:41 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:41 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) [ 1847.535327] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1847.576145] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1847.594042] CPU: 0 PID: 10003 Comm: syz-executor.4 Not tainted 4.14.169-syzkaller #0 [ 1847.602752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1847.612115] Call Trace: [ 1847.614714] dump_stack+0x142/0x197 [ 1847.618338] dump_header+0x177/0x6cd [ 1847.622045] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1847.627268] ? ___ratelimit+0x55/0x537 [ 1847.631202] oom_kill_process.cold+0x10/0xadd [ 1847.635690] ? rcu_read_unlock_special+0x639/0xd40 [ 1847.640702] ? lock_downgrade+0x740/0x740 [ 1847.644856] out_of_memory+0x2ee/0x1180 [ 1847.648863] ? lock_acquire+0x16f/0x430 [ 1847.652868] ? oom_killer_disable+0x1d0/0x1d0 [ 1847.657374] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1847.662465] __alloc_pages_slowpath+0x2251/0x2930 [ 1847.667324] ? warn_alloc+0xf0/0xf0 [ 1847.671000] ? __might_sleep+0x93/0xb0 [ 1847.674888] __alloc_pages_nodemask+0x62c/0x7a0 [ 1847.679614] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1847.684735] ? rcu_read_lock_sched_held+0x110/0x130 [ 1847.689748] ? check_preemption_disabled+0x3c/0x250 [ 1847.694765] copy_process.part.0+0x26a/0x6a70 [ 1847.699296] ? __handle_mm_fault+0x1bc2/0x33d0 [ 1847.703914] ? lock_downgrade+0x740/0x740 [ 1847.708092] ? pud_val+0xe0/0xe0 [ 1847.711499] ? do_raw_spin_unlock+0x174/0x260 [ 1847.716096] ? _raw_spin_unlock+0x2d/0x50 [ 1847.720288] ? __cleanup_sighand+0x50/0x50 [ 1847.724513] ? __do_page_fault+0x4e9/0xb80 [ 1847.728748] ? find_held_lock+0x35/0x130 [ 1847.732850] _do_fork+0x19e/0xce0 [ 1847.736303] ? fork_idle+0x280/0x280 [ 1847.740020] ? up_read+0x1a/0x40 [ 1847.743419] ? __do_page_fault+0x358/0xb80 [ 1847.747648] ? mprotect_fixup+0x920/0x920 [ 1847.752584] SyS_clone+0x37/0x50 [ 1847.755960] ? sys_vfork+0x30/0x30 [ 1847.759629] do_syscall_64+0x1e8/0x640 [ 1847.763523] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1847.768630] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1847.773825] RIP: 0033:0x45dd69 [ 1847.777011] RSP: 002b:00007ffdb1dd31d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1847.784867] RAX: ffffffffffffffda RBX: 00007f2227843700 RCX: 000000000045dd69 [ 1847.792216] RDX: 00007f22278439d0 RSI: 00007f2227842db0 RDI: 00000000003d0f00 [ 1847.799602] RBP: 00007ffdb1dd33f0 R08: 00007f2227843700 R09: 00007f2227843700 [ 1847.806898] R10: 00007f22278439d0 R11: 0000000000000202 R12: 0000000000000000 [ 1847.814263] R13: 00007ffdb1dd328f R14: 00007f22278439c0 R15: 000000000075c124 [ 1847.858362] Mem-Info: [ 1847.861058] active_anon:762713 inactive_anon:549653 isolated_anon:0 [ 1847.861058] active_file:216 inactive_file:205 isolated_file:64 [ 1847.861058] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1847.861058] slab_reclaimable:22404 slab_unreclaimable:125735 [ 1847.861058] mapped:601648 shmem:610054 pagetables:30858 bounce:0 [ 1847.861058] free:23860 free_pcp:237 free_cma:0 [ 1847.896606] Node 0 active_anon:867008kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1847.925574] Node 1 active_anon:2183844kB inactive_anon:1183156kB active_file:760kB inactive_file:700kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1182668kB dirty:92kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1847.968284] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1848.056739] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1848.062131] Node 0 DMA32 free:32032kB min:36384kB low:45480kB high:54576kB active_anon:866048kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18112kB pagetables:30636kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1848.102402] lowmem_reserve[]: 0 0 0 0 0 [ 1848.107092] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1848.135435] lowmem_reserve[]: 0 0 0 0 0 [ 1848.140977] Node 1 Normal free:55228kB min:53504kB low:66880kB high:80256kB active_anon:2183908kB inactive_anon:1183156kB active_file:40kB inactive_file:184kB unevictable:0kB writepending:52kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24064kB pagetables:92712kB bounce:0kB free_pcp:188kB local_pcp:8kB free_cma:0kB [ 1848.174326] lowmem_reserve[]: 0 0 0 0 0 [ 1848.178843] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1848.202251] Node 0 DMA32: 1146*4kB (UME) 2061*8kB (UME) 161*16kB (UME) 10*32kB (UME) 62*64kB (UM) 14*128kB (M) 3*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 32032kB [ 1848.236184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1848.252809] Node 1 Normal: 162*4kB (UE) 57*8kB (UME) 40*16kB (UME) 87*32kB (UME) 103*64kB (UME) 226*128kB (M) 55*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54128kB [ 1848.274176] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1848.284532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1848.297518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1848.307248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1848.322749] 610322 total pagecache pages [ 1848.326864] 0 pages in swap cache [ 1848.332810] Swap cache stats: add 0, delete 0, find 0/0 [ 1848.338498] Free swap = 0kB [ 1848.344068] Total swap = 0kB [ 1848.347377] 1965979 pages RAM [ 1848.387044] 0 pages HighMem/MovableOnly [ 1848.396488] 335855 pages reserved [ 1848.414321] 0 pages cma reserved [ 1848.417732] Out of memory: Kill process 5895 (syz-executor.0) score 1007 or sacrifice child [ 1848.434898] Killed process 5895 (syz-executor.0) total-vm:72984kB, anon-rss:16552kB, file-rss:34704kB, shmem-rss:0kB [ 1848.489772] oom_reaper: reaped process 5895 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:05:42 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:43 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:43 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x0, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b331454c691db"}}}}}}}, 0x0) 21:05:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:43 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:43 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:43 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x0, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b331454c691db"}}}}}}}, 0x0) 21:05:43 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30", 0x92) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 21:05:45 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:45 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:46 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac", 0x93) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:46 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x30, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}}}}}}}, 0x0) 21:05:46 executing program 5: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x7, 0x0) semtimedop(r0, &(0x7f0000000640)=[{}, {0x3}], 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 21:05:46 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:46 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x30, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}}}}}}}, 0x0) 21:05:46 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xfe6e) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'/32, @ANYRES32=r2], 0x24}, 0x0) 21:05:46 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x30, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}}}}}}}, 0x0) 21:05:46 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:46 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:46 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 21:05:46 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac", 0x93) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:46 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:46 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x34, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b3314"}}}}}}}, 0x0) 21:05:46 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:46 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) 21:05:46 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:46 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x34, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b3314"}}}}}}}, 0x0) 21:05:47 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:47 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) 21:05:47 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x34, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b3314"}}}}}}}, 0x0) 21:05:47 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:47 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:47 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac", 0x93) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:05:47 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:47 executing program 3: syz_emit_ethernet(0x6c, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x36, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b331454c6"}}}}}}}, 0x0) 21:05:47 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) 21:05:47 executing program 3: syz_emit_ethernet(0x6c, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x36, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b331454c6"}}}}}}}, 0x0) 21:05:47 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:48 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) [ 1855.316444] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 1855.333811] udevd cpuset=/ mems_allowed=0-1 [ 1855.338245] CPU: 0 PID: 3717 Comm: udevd Not tainted 4.14.169-syzkaller #0 [ 1855.345289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1855.354635] Call Trace: [ 1855.357402] dump_stack+0x142/0x197 [ 1855.361045] dump_header+0x177/0x6cd [ 1855.364813] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1855.370726] ? ___ratelimit+0x55/0x537 [ 1855.374630] oom_kill_process.cold+0x10/0xadd [ 1855.379218] ? rcu_read_unlock_special+0x639/0xd40 [ 1855.384301] ? lock_downgrade+0x740/0x740 [ 1855.388563] out_of_memory+0x2ee/0x1180 [ 1855.392639] ? lock_acquire+0x16f/0x430 [ 1855.397770] ? oom_killer_disable+0x1d0/0x1d0 [ 1855.402310] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1855.407254] __alloc_pages_slowpath+0x2251/0x2930 [ 1855.412120] ? warn_alloc+0xf0/0xf0 [ 1855.415779] ? __might_sleep+0x93/0xb0 [ 1855.419679] __alloc_pages_nodemask+0x62c/0x7a0 [ 1855.424365] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1855.429565] ? ____cache_alloc_node+0x1be/0x1d0 [ 1855.434374] ? cache_grow_begin+0x335/0x400 [ 1855.438746] cache_grow_begin+0x80/0x400 [ 1855.442819] ? __cpuset_node_allowed+0xff/0x450 [ 1855.447498] fallback_alloc+0x1fd/0x2c0 [ 1855.451486] ____cache_alloc_node+0x1be/0x1d0 [ 1855.455988] kmem_cache_alloc+0x1f3/0x780 [ 1855.460210] ? __do_page_fault+0x4e9/0xb80 [ 1855.464445] getname_flags+0xcb/0x580 [ 1855.468241] getname+0x1a/0x20 [ 1855.471436] do_sys_open+0x1e7/0x430 [ 1855.475239] ? filp_open+0x70/0x70 [ 1855.478828] SyS_open+0x2d/0x40 [ 1855.482101] ? do_sys_open+0x430/0x430 [ 1855.485986] do_syscall_64+0x1e8/0x640 [ 1855.489873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1855.494891] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1855.500082] RIP: 0033:0x7fb98439b120 [ 1855.504003] RSP: 002b:00007ffcd979cf68 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1855.511725] RAX: ffffffffffffffda RBX: 0000000001abf470 RCX: 00007fb98439b120 [ 1855.519105] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007ffcd979dbe0 [ 1855.526373] RBP: 0000000001af2580 R08: 000000000041f4f1 R09: 00007fb9843f17d0 [ 1855.533819] R10: 7269762f73656369 R11: 0000000000000246 R12: 0000000000000003 [ 1855.541082] R13: 0000000000000000 R14: 0000000001abf470 R15: 0000000001aa2030 [ 1855.554834] Mem-Info: [ 1855.557274] active_anon:760620 inactive_anon:549655 isolated_anon:0 [ 1855.557274] active_file:90 inactive_file:90 isolated_file:9 [ 1855.557274] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1855.557274] slab_reclaimable:22564 slab_unreclaimable:127466 [ 1855.557274] mapped:601353 shmem:610054 pagetables:31058 bounce:0 [ 1855.557274] free:24168 free_pcp:56 free_cma:0 [ 1855.597887] Node 0 active_anon:866644kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1855.636316] Node 1 active_anon:2175836kB inactive_anon:1183164kB active_file:228kB inactive_file:956kB unevictable:0kB isolated(anon):0kB isolated(file):152kB mapped:1182288kB dirty:0kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1855.669458] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1855.705648] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1855.710800] Node 0 DMA32 free:32420kB min:36384kB low:45480kB high:54576kB active_anon:865684kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18368kB pagetables:30636kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1855.745010] lowmem_reserve[]: 0 0 0 0 0 [ 1855.749041] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1855.788203] lowmem_reserve[]: 0 0 0 0 0 [ 1855.794127] Node 1 Normal free:53808kB min:53504kB low:66880kB high:80256kB active_anon:2175836kB inactive_anon:1183164kB active_file:360kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24256kB pagetables:93588kB bounce:0kB free_pcp:736kB local_pcp:112kB free_cma:0kB [ 1855.829217] lowmem_reserve[]: 0 0 0 0 0 [ 1855.839666] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1855.860326] Node 0 DMA32: 1275*4kB (UME) 2161*8kB (UME) 115*16kB (UME) 10*32kB (UME) 61*64kB (M) 15*128kB (UM) 4*256kB (UM) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 32420kB [ 1855.881864] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1855.896369] Node 1 Normal: 257*4kB (UME) 63*8kB (UMEH) 36*16kB (UM) 41*32kB (UME) 213*64kB (UM) 205*128kB (ME) 41*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53788kB [ 1855.927038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1855.952572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1855.964783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1855.984845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1855.993973] 610273 total pagecache pages [ 1855.998053] 0 pages in swap cache [ 1856.006503] Swap cache stats: add 0, delete 0, find 0/0 [ 1856.012316] Free swap = 0kB [ 1856.015342] Total swap = 0kB [ 1856.018370] 1965979 pages RAM [ 1856.026297] 0 pages HighMem/MovableOnly [ 1856.030386] 335855 pages reserved [ 1856.033972] 0 pages cma reserved [ 1856.037346] Out of memory: Kill process 4886 (syz-executor.5) score 1007 or sacrifice child [ 1856.050157] Killed process 4886 (syz-executor.5) total-vm:73116kB, anon-rss:16568kB, file-rss:34632kB, shmem-rss:0kB [ 1856.144423] oom_reaper: reaped process 4886 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:05:49 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:50 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:50 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:50 executing program 3: syz_emit_ethernet(0x6c, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x36, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b331454c6"}}}}}}}, 0x0) 21:05:50 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) 21:05:50 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:50 executing program 3: syz_emit_ethernet(0x6d, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x37, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b331454c691"}}}}}}}, 0x0) 21:05:51 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:51 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:51 executing program 3: syz_emit_ethernet(0x6d, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x37, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b331454c691"}}}}}}}, 0x0) 21:05:51 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:51 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:51 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:51 executing program 3: syz_emit_ethernet(0x6d, &(0x7f0000002c00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00dfff", 0x37, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "ee7a21", 0x0, 0x21, 0x0, @empty, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "485b331454c691"}}}}}}}, 0x0) 21:05:52 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) [ 1858.460366] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1858.487283] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1858.504256] CPU: 1 PID: 10290 Comm: syz-executor.3 Not tainted 4.14.169-syzkaller #0 [ 1858.512184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1858.521771] Call Trace: [ 1858.524487] dump_stack+0x142/0x197 [ 1858.528148] dump_header+0x177/0x6cd [ 1858.531879] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1858.537117] ? ___ratelimit+0x55/0x537 [ 1858.541026] oom_kill_process.cold+0x10/0xadd [ 1858.545532] ? rcu_read_unlock_special+0x895/0xd40 [ 1858.550494] ? lock_downgrade+0x740/0x740 [ 1858.554708] out_of_memory+0x2ee/0x1180 [ 1858.558727] ? lock_acquire+0x16f/0x430 [ 1858.562733] ? oom_killer_disable+0x1d0/0x1d0 [ 1858.567248] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1858.572355] __alloc_pages_slowpath+0x2251/0x2930 [ 1858.577324] ? warn_alloc+0xf0/0xf0 [ 1858.581493] ? __might_sleep+0x93/0xb0 [ 1858.585392] __alloc_pages_nodemask+0x62c/0x7a0 [ 1858.590209] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1858.595234] ? ____cache_alloc_node+0x1be/0x1d0 [ 1858.600033] ? cache_grow_begin+0x335/0x400 [ 1858.604378] cache_grow_begin+0x80/0x400 [ 1858.608452] ? __cpuset_node_allowed+0xff/0x450 [ 1858.613250] fallback_alloc+0x1fd/0x2c0 [ 1858.617246] ____cache_alloc_node+0x1be/0x1d0 [ 1858.622795] kmem_cache_alloc+0x1f3/0x780 [ 1858.626931] ? putname+0xdb/0x120 [ 1858.630488] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1858.635928] getname_flags+0xcb/0x580 [ 1858.639720] SyS_symlink+0x68/0x210 [ 1858.643352] ? SyS_symlinkat+0x210/0x210 [ 1858.647418] ? do_syscall_64+0x53/0x640 [ 1858.651392] ? SyS_symlinkat+0x210/0x210 [ 1858.655599] do_syscall_64+0x1e8/0x640 [ 1858.659544] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1858.664517] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1858.669702] RIP: 0033:0x45b0c7 [ 1858.672885] RSP: 002b:00007ffdd0b8fd38 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 1858.680592] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045b0c7 [ 1858.687868] RDX: 00007ffdd0b8fdd3 RSI: 00000000004c0f5a RDI: 00007ffdd0b8fdc0 [ 1858.695154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 [ 1858.702442] R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000000 [ 1858.709723] R13: 00007ffdd0b8fd70 R14: 0000000000000000 R15: 00007ffdd0b8fd80 [ 1858.840246] Mem-Info: [ 1858.843077] active_anon:761602 inactive_anon:549652 isolated_anon:0 [ 1858.843077] active_file:256 inactive_file:280 isolated_file:34 [ 1858.843077] unevictable:0 dirty:12 writeback:25 unstable:0 [ 1858.843077] slab_reclaimable:22660 slab_unreclaimable:127919 [ 1858.843077] mapped:601776 shmem:610054 pagetables:31178 bounce:0 [ 1858.843077] free:21950 free_pcp:0 free_cma:0 [ 1858.938514] Node 0 active_anon:871608kB inactive_anon:1015456kB active_file:4kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1858.975714] Node 1 active_anon:2174800kB inactive_anon:1183152kB active_file:888kB inactive_file:752kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:1182980kB dirty:48kB writeback:100kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1859.015956] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1859.066414] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1859.072002] Node 0 DMA32 free:27640kB min:36384kB low:45480kB high:54576kB active_anon:870656kB inactive_anon:1011236kB active_file:4kB inactive_file:104kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18400kB pagetables:30644kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1859.108634] lowmem_reserve[]: 0 0 0 0 0 [ 1859.114755] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1859.146685] lowmem_reserve[]: 0 0 0 0 0 [ 1859.151174] Node 1 Normal free:51160kB min:53504kB low:66880kB high:80256kB active_anon:2174956kB inactive_anon:1183152kB active_file:644kB inactive_file:684kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24256kB pagetables:94092kB bounce:0kB free_pcp:212kB local_pcp:0kB free_cma:0kB [ 1859.195117] lowmem_reserve[]: 0 0 0 0 0 [ 1859.199457] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1859.225809] Node 0 DMA32: 481*4kB (UME) 1967*8kB (UME) 117*16kB (UME) 11*32kB (UME) 62*64kB (UM) 14*128kB (M) 4*256kB (UM) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 27692kB [ 1859.246600] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1859.257999] Node 1 Normal: 1171*4kB (UM) 216*8kB (UME) 53*16kB (UME) 6*32kB (UM) 159*64kB (UM) 194*128kB (UME) 34*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51164kB [ 1859.308180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1859.336513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1859.365871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1859.391748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1859.420145] 610249 total pagecache pages [ 1859.432796] 0 pages in swap cache [ 1859.441140] Swap cache stats: add 0, delete 0, find 0/0 [ 1859.453591] Free swap = 0kB [ 1859.463999] Total swap = 0kB [ 1859.473493] 1965979 pages RAM [ 1859.485854] 0 pages HighMem/MovableOnly [ 1859.490143] 335855 pages reserved [ 1859.493606] 0 pages cma reserved [ 1859.496972] Out of memory: Kill process 10284 (syz-executor.0) score 1007 or sacrifice child [ 1859.726696] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 1859.772335] udevd cpuset=/ mems_allowed=0-1 [ 1859.776904] CPU: 0 PID: 10287 Comm: udevd Not tainted 4.14.169-syzkaller #0 [ 1859.784017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1859.793375] Call Trace: [ 1859.795999] dump_stack+0x142/0x197 [ 1859.799646] dump_header+0x177/0x6cd [ 1859.803368] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1859.808488] ? ___ratelimit+0x55/0x537 [ 1859.812386] oom_kill_process.cold+0x10/0xadd [ 1859.816883] ? oom_unkillable_task+0x294/0x390 [ 1859.821494] ? lock_downgrade+0x740/0x740 [ 1859.825653] out_of_memory+0x2ee/0x1180 [ 1859.829627] ? lock_acquire+0x16f/0x430 [ 1859.833608] ? oom_killer_disable+0x1d0/0x1d0 [ 1859.838102] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1859.843037] __alloc_pages_slowpath+0x2251/0x2930 [ 1859.847916] ? warn_alloc+0xf0/0xf0 [ 1859.851595] ? __might_sleep+0x93/0xb0 [ 1859.855527] __alloc_pages_nodemask+0x62c/0x7a0 [ 1859.860384] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1859.865411] ? ____cache_alloc_node+0x1be/0x1d0 [ 1859.870096] ? cache_grow_begin+0x335/0x400 [ 1859.874449] cache_grow_begin+0x80/0x400 [ 1859.878535] ? __cpuset_node_allowed+0xff/0x450 [ 1859.883225] fallback_alloc+0x1fd/0x2c0 [ 1859.887219] ____cache_alloc_node+0x1be/0x1d0 [ 1859.891731] kmem_cache_alloc+0x1f3/0x780 [ 1859.895887] ? __do_page_fault+0x4e9/0xb80 [ 1859.900240] getname_flags+0xcb/0x580 [ 1859.904054] getname+0x1a/0x20 [ 1859.907260] do_sys_open+0x1e7/0x430 [ 1859.910972] ? filp_open+0x70/0x70 [ 1859.914620] SyS_open+0x2d/0x40 [ 1859.917900] ? do_sys_open+0x430/0x430 [ 1859.921782] do_syscall_64+0x1e8/0x640 [ 1859.925845] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1859.930686] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1859.935878] RIP: 0033:0x7fb98439b120 [ 1859.939934] RSP: 002b:00007ffcd9795628 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1859.947646] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fb98439b120 [ 1859.955007] RDX: 0000000001af2300 RSI: 0000000000000002 RDI: 000000000041c571 [ 1859.962335] RBP: 0000000000625500 R08: 0000000000002185 R09: 0000000000002185 [ 1859.969723] R10: 00007fb9840c0240 R11: 0000000000000246 R12: 0000000001aea1f0 [ 1859.977100] R13: 0000000000000007 R14: 0000000001aa2030 R15: 0000000000000005 [ 1860.110101] Mem-Info: [ 1860.112568] active_anon:761656 inactive_anon:549652 isolated_anon:0 [ 1860.112568] active_file:9 inactive_file:15 isolated_file:0 [ 1860.112568] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1860.112568] slab_reclaimable:22657 slab_unreclaimable:127761 [ 1860.112568] mapped:601267 shmem:610054 pagetables:31186 bounce:0 [ 1860.112568] free:22834 free_pcp:6 free_cma:0 [ 1860.491273] Node 0 active_anon:871668kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1860.773652] Node 1 active_anon:2174956kB inactive_anon:1183152kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1181444kB dirty:0kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1861.068827] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1861.400097] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1861.405184] Node 0 DMA32 free:27728kB min:36384kB low:45480kB high:54576kB active_anon:870708kB inactive_anon:1011236kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18400kB pagetables:30644kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1861.698917] lowmem_reserve[]: 0 0 0 0 0 [ 1861.769908] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1862.034845] lowmem_reserve[]: 0 0 0 0 0 [ 1862.038912] Node 1 Normal free:53292kB min:53504kB low:66880kB high:80256kB active_anon:2174956kB inactive_anon:1183152kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24256kB pagetables:94092kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1862.116322] lowmem_reserve[]: 0 0 0 0 0 [ 1862.138400] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1862.338783] Node 0 DMA32: 480*4kB (UME) 1971*8kB (UME) 118*16kB (UME) 12*32kB (UME) 62*64kB (UM) 14*128kB (M) 4*256kB (UM) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 27768kB [ 1862.469106] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1862.584308] Node 1 Normal: 1343*4kB (UM) 324*8kB (UME) 85*16kB (UME) 8*32kB (UM) 159*64kB (UM) 194*128kB (UME) 34*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53292kB [ 1862.709821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1862.839837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1862.939466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1863.060094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1863.068721] 610078 total pagecache pages [ 1863.174758] 0 pages in swap cache [ 1863.178457] Swap cache stats: add 0, delete 0, find 0/0 [ 1863.299358] Free swap = 0kB [ 1863.328795] Total swap = 0kB [ 1863.370686] 1965979 pages RAM [ 1863.373832] 0 pages HighMem/MovableOnly [ 1863.377809] 335855 pages reserved [ 1863.472515] 0 pages cma reserved [ 1863.475927] Out of memory: Kill process 10250 (syz-executor.0) score 1007 or sacrifice child [ 1863.600110] Killed process 10250 (syz-executor.0) total-vm:73116kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB [ 1863.810199] oom_reaper: reaped process 10250 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:05:58 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:58 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r0, &(0x7f00000000c0), 0x2) 21:05:58 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:05:58 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:05:58 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:05:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r0, &(0x7f00000000c0), 0x2) [ 1865.285489] syz-executor.3 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1865.327398] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1865.338882] CPU: 1 PID: 31766 Comm: syz-executor.3 Not tainted 4.14.169-syzkaller #0 [ 1865.346803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1865.356163] Call Trace: [ 1865.358772] dump_stack+0x142/0x197 [ 1865.362420] dump_header+0x177/0x6cd [ 1865.366271] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1865.371518] ? ___ratelimit+0x55/0x537 [ 1865.375426] oom_kill_process.cold+0x10/0xadd [ 1865.379937] ? rcu_read_unlock_special+0x895/0xd40 [ 1865.384883] ? lock_downgrade+0x740/0x740 [ 1865.389051] out_of_memory+0x2ee/0x1180 [ 1865.393034] ? lock_acquire+0x16f/0x430 [ 1865.397058] ? oom_killer_disable+0x1d0/0x1d0 [ 1865.401567] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1865.406514] __alloc_pages_slowpath+0x2251/0x2930 [ 1865.411389] ? kasan_kmalloc+0xce/0xf0 [ 1865.415302] ? warn_alloc+0xf0/0xf0 [ 1865.419095] ? __might_sleep+0x93/0xb0 [ 1865.423182] __alloc_pages_nodemask+0x62c/0x7a0 [ 1865.427871] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1865.432900] ? rcu_read_lock_sched_held+0x110/0x130 [ 1865.437964] ? kasan_unpoison_shadow+0x35/0x50 [ 1865.442564] alloc_pages_current+0xec/0x1e0 [ 1865.446904] __vmalloc_node_range+0x3e9/0x6a0 [ 1865.451423] vzalloc+0x46/0x50 [ 1865.454633] ? alloc_counters.isra.0+0x48/0x90 [ 1865.459252] alloc_counters.isra.0+0x48/0x90 [ 1865.463676] do_ipt_get_ctl+0x439/0x7e0 [ 1865.467664] ? save_trace+0x290/0x290 [ 1865.471475] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1865.476438] ? alloc_counters.isra.0+0x90/0x90 [ 1865.481140] ? find_held_lock+0x35/0x130 [ 1865.485235] ? wait_for_completion+0x420/0x420 [ 1865.489835] ? mutex_unlock+0xd/0x10 [ 1865.493564] ? nf_sockopt_find.constprop.0+0x1b7/0x230 [ 1865.498875] nf_getsockopt+0x6a/0xc0 [ 1865.502610] ip_getsockopt+0x10d/0x150 [ 1865.506526] ? do_ip_getsockopt+0x1550/0x1550 [ 1865.511026] tcp_getsockopt+0x84/0xd0 [ 1865.514840] sock_common_getsockopt+0x94/0xd0 [ 1865.519449] SyS_getsockopt+0x126/0x1e0 [ 1865.523418] ? SyS_setsockopt+0x210/0x210 [ 1865.527673] ? do_syscall_64+0x53/0x640 [ 1865.531641] ? SyS_setsockopt+0x210/0x210 [ 1865.535798] do_syscall_64+0x1e8/0x640 [ 1865.539690] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1865.544637] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1865.549834] RIP: 0033:0x45deaa [ 1865.553023] RSP: 002b:00007ffdd0b8f5a8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 1865.560737] RAX: ffffffffffffffda RBX: 00007ffdd0b8f5d0 RCX: 000000000045deaa [ 1865.568114] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 1865.575386] RBP: 000000000071de80 R08: 00007ffdd0b8f5cc R09: 0000000000004000 [ 1865.582795] R10: 00007ffdd0b8f6d0 R11: 0000000000000216 R12: 0000000000000003 [ 1865.590066] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000071d7c0 [ 1865.644849] Mem-Info: [ 1865.647483] active_anon:761595 inactive_anon:549654 isolated_anon:0 [ 1865.647483] active_file:402 inactive_file:402 isolated_file:47 [ 1865.647483] unevictable:0 dirty:27 writeback:9 unstable:0 [ 1865.647483] slab_reclaimable:22675 slab_unreclaimable:127683 [ 1865.647483] mapped:602102 shmem:610054 pagetables:31132 bounce:0 [ 1865.647483] free:22052 free_pcp:7 free_cma:0 [ 1865.687610] Node 0 active_anon:871740kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1865.777245] Node 1 active_anon:2174640kB inactive_anon:1183160kB active_file:1368kB inactive_file:1392kB unevictable:0kB isolated(anon):0kB isolated(file):160kB mapped:1183984kB dirty:108kB writeback:36kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1865.830551] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1865.864966] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1865.895845] Node 0 DMA32 free:27660kB min:36384kB low:45480kB high:54576kB active_anon:870780kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18368kB pagetables:30648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1865.939855] lowmem_reserve[]: 0 0 0 0 0 [ 1865.956388] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1865.988036] lowmem_reserve[]: 0 0 0 0 0 [ 1865.994166] Node 1 Normal free:52136kB min:53504kB low:66880kB high:80256kB active_anon:2174556kB inactive_anon:1183160kB active_file:1236kB inactive_file:1224kB unevictable:0kB writepending:144kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24192kB pagetables:93872kB bounce:0kB free_pcp:76kB local_pcp:0kB free_cma:0kB [ 1866.029686] lowmem_reserve[]: 0 0 0 0 0 [ 1866.034266] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1866.094250] Node 0 DMA32: 500*4kB (UME) 1960*8kB (UME) 120*16kB (UME) 10*32kB (ME) 61*64kB (M) 15*128kB (M) 4*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 27792kB [ 1866.146342] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1866.168360] Node 1 Normal: 1228*4kB (UM) 322*8kB (UM) 108*16kB (UME) 12*32kB (UME) 158*64kB (ME) 193*128kB (ME) 34*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53120kB [ 1866.190089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1866.199282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1866.213484] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1866.225685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1866.242887] 610330 total pagecache pages [ 1866.247218] 0 pages in swap cache [ 1866.253955] Swap cache stats: add 0, delete 0, find 0/0 [ 1866.259570] Free swap = 0kB [ 1866.266031] Total swap = 0kB [ 1866.269711] 1965979 pages RAM [ 1866.276584] 0 pages HighMem/MovableOnly [ 1866.283946] 335855 pages reserved [ 1866.287647] 0 pages cma reserved [ 1866.295364] Out of memory: Kill process 10310 (syz-executor.2) score 1007 or sacrifice child [ 1866.844185] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1866.876620] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1866.887993] CPU: 0 PID: 10309 Comm: syz-executor.4 Not tainted 4.14.169-syzkaller #0 [ 1866.895911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1866.905386] Call Trace: [ 1866.908000] dump_stack+0x142/0x197 [ 1866.911666] dump_header+0x177/0x6cd [ 1866.915394] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1866.920515] ? ___ratelimit+0x55/0x537 [ 1866.924420] oom_kill_process.cold+0x10/0xadd [ 1866.928909] ? rcu_read_unlock_special+0x639/0xd40 [ 1866.933849] ? lock_downgrade+0x740/0x740 [ 1866.938067] out_of_memory+0x2ee/0x1180 [ 1866.942067] ? lock_acquire+0x16f/0x430 [ 1866.946067] ? oom_killer_disable+0x1d0/0x1d0 [ 1866.950572] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1866.955514] __alloc_pages_slowpath+0x2251/0x2930 [ 1866.960521] ? warn_alloc+0xf0/0xf0 [ 1866.964151] ? __might_sleep+0x93/0xb0 [ 1866.968048] __alloc_pages_nodemask+0x62c/0x7a0 [ 1866.972726] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1866.977755] ? rcu_read_lock_sched_held+0x110/0x130 [ 1866.982789] copy_process.part.0+0x26a/0x6a70 [ 1866.987284] ? __handle_mm_fault+0x1bc2/0x33d0 [ 1866.991876] ? lock_downgrade+0x740/0x740 [ 1866.996033] ? pud_val+0xe0/0xe0 [ 1866.999426] ? do_raw_spin_unlock+0x174/0x260 [ 1867.004429] ? _raw_spin_unlock+0x2d/0x50 [ 1867.008598] ? __cleanup_sighand+0x50/0x50 [ 1867.012840] ? __do_page_fault+0x4e9/0xb80 [ 1867.017083] ? find_held_lock+0x35/0x130 [ 1867.021146] _do_fork+0x19e/0xce0 [ 1867.024612] ? fork_idle+0x280/0x280 [ 1867.028334] ? up_read+0x1a/0x40 [ 1867.031725] ? __do_page_fault+0x358/0xb80 [ 1867.035952] ? mprotect_fixup+0x920/0x920 [ 1867.040125] SyS_clone+0x37/0x50 [ 1867.043518] ? sys_vfork+0x30/0x30 [ 1867.047072] do_syscall_64+0x1e8/0x640 [ 1867.051005] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1867.055878] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1867.061075] RIP: 0033:0x45dd69 [ 1867.064271] RSP: 002b:00007ffdb1dd31d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1867.071990] RAX: ffffffffffffffda RBX: 00007f2227864700 RCX: 000000000045dd69 [ 1867.079259] RDX: 00007f22278649d0 RSI: 00007f2227863db0 RDI: 00000000003d0f00 [ 1867.086764] RBP: 00007ffdb1dd33f0 R08: 00007f2227864700 R09: 00007f2227864700 [ 1867.094039] R10: 00007f22278649d0 R11: 0000000000000202 R12: 0000000000000000 [ 1867.101390] R13: 00007ffdb1dd328f R14: 00007f22278649c0 R15: 000000000075c07c [ 1867.194124] Mem-Info: [ 1867.196612] active_anon:761610 inactive_anon:549654 isolated_anon:0 [ 1867.196612] active_file:21 inactive_file:35 isolated_file:0 [ 1867.196612] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1867.196612] slab_reclaimable:22675 slab_unreclaimable:127650 [ 1867.196612] mapped:601280 shmem:610054 pagetables:31105 bounce:0 [ 1867.196612] free:22860 free_pcp:170 free_cma:0 [ 1867.318160] Node 0 active_anon:871736kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1867.347034] Node 1 active_anon:2174704kB inactive_anon:1183160kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:1181496kB dirty:0kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1867.378267] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1867.414156] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1867.419425] Node 0 DMA32 free:27792kB min:36384kB low:45480kB high:54576kB active_anon:870776kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18368kB pagetables:30644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1867.456297] lowmem_reserve[]: 0 0 0 0 0 [ 1867.487638] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1867.521502] lowmem_reserve[]: 0 0 0 0 0 [ 1867.526048] Node 1 Normal free:53560kB min:53504kB low:66880kB high:80256kB active_anon:2174704kB inactive_anon:1183160kB active_file:516kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24160kB pagetables:93768kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1867.566035] lowmem_reserve[]: 0 0 0 0 0 [ 1867.593406] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1867.611204] Node 0 DMA32: 500*4kB (UME) 1960*8kB (UME) 120*16kB (UME) 10*32kB (ME) 61*64kB (M) 15*128kB (M) 4*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 27792kB [ 1867.626830] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1867.639504] Node 1 Normal: 1405*4kB (UM) 357*8kB (UM) 116*16kB (UME) 13*32kB (UME) 158*64kB (ME) 193*128kB (ME) 34*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54268kB [ 1867.668819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1867.678194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1867.695943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1867.715813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1867.725369] 610152 total pagecache pages [ 1867.729785] 0 pages in swap cache [ 1867.751303] Swap cache stats: add 0, delete 0, find 0/0 [ 1867.756712] Free swap = 0kB [ 1867.763617] Total swap = 0kB [ 1867.766672] 1965979 pages RAM [ 1867.769938] 0 pages HighMem/MovableOnly [ 1867.774040] 335855 pages reserved [ 1867.777499] 0 pages cma reserved [ 1867.780972] Out of memory: Kill process 10327 (syz-executor.2) score 1007 or sacrifice child [ 1867.789606] Killed process 10327 (syz-executor.2) total-vm:73116kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 1867.852394] oom_reaper: reaped process 10327 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:06:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r0, &(0x7f00000000c0), 0x2) 21:06:02 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:06:02 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x0, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:06:02 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) 21:06:02 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:06:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 21:06:03 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) [ 1869.724661] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1869.811068] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1869.840458] CPU: 1 PID: 10350 Comm: syz-executor.4 Not tainted 4.14.169-syzkaller #0 [ 1869.848520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1869.858003] Call Trace: [ 1869.860611] dump_stack+0x142/0x197 [ 1869.864358] dump_header+0x177/0x6cd [ 1869.868090] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1869.873350] ? ___ratelimit+0x55/0x537 [ 1869.877371] oom_kill_process.cold+0x10/0xadd [ 1869.881877] ? rcu_read_unlock_special+0x895/0xd40 [ 1869.886925] ? lock_downgrade+0x740/0x740 [ 1869.891081] out_of_memory+0x2ee/0x1180 [ 1869.895062] ? lock_acquire+0x1ea/0x430 [ 1869.899069] ? oom_killer_disable+0x1d0/0x1d0 [ 1869.903575] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1869.908504] __alloc_pages_slowpath+0x2251/0x2930 [ 1869.913366] ? warn_alloc+0xf0/0xf0 [ 1869.917000] ? __might_sleep+0x93/0xb0 [ 1869.920889] __alloc_pages_nodemask+0x62c/0x7a0 [ 1869.925566] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1869.930582] ? rcu_read_lock_sched_held+0x110/0x130 [ 1869.935610] ? check_preemption_disabled+0x3c/0x250 [ 1869.940631] copy_process.part.0+0x26a/0x6a70 [ 1869.945167] ? __handle_mm_fault+0x1bc2/0x33d0 [ 1869.949873] ? lock_downgrade+0x740/0x740 [ 1869.954029] ? pud_val+0xe0/0xe0 [ 1869.957398] ? do_raw_spin_unlock+0x174/0x260 [ 1869.961912] ? _raw_spin_unlock+0x2d/0x50 [ 1869.966071] ? __cleanup_sighand+0x50/0x50 [ 1869.970310] ? __do_page_fault+0x4e9/0xb80 [ 1869.974551] ? find_held_lock+0x35/0x130 [ 1869.978608] _do_fork+0x19e/0xce0 [ 1869.982363] ? fork_idle+0x280/0x280 [ 1869.986073] ? up_read+0x1a/0x40 [ 1869.989555] ? __do_page_fault+0x358/0xb80 [ 1869.993795] ? mprotect_fixup+0x920/0x920 [ 1869.998027] SyS_clone+0x37/0x50 [ 1870.001386] ? sys_vfork+0x30/0x30 [ 1870.004947] do_syscall_64+0x1e8/0x640 [ 1870.008841] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1870.013707] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1870.018910] RIP: 0033:0x45dd69 [ 1870.022087] RSP: 002b:00007ffdb1dd31d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1870.031535] RAX: ffffffffffffffda RBX: 00007f2227885700 RCX: 000000000045dd69 [ 1870.038828] RDX: 00007f22278859d0 RSI: 00007f2227884db0 RDI: 00000000003d0f00 [ 1870.046129] RBP: 00007ffdb1dd33f0 R08: 00007f2227885700 R09: 00007f2227885700 [ 1870.053525] R10: 00007f22278859d0 R11: 0000000000000202 R12: 0000000000000000 [ 1870.060793] R13: 00007ffdb1dd328f R14: 00007f22278859c0 R15: 000000000075bfd4 [ 1870.410104] Mem-Info: [ 1870.412575] active_anon:761606 inactive_anon:549655 isolated_anon:0 [ 1870.412575] active_file:95 inactive_file:100 isolated_file:57 [ 1870.412575] unevictable:0 dirty:52 writeback:1 unstable:0 [ 1870.412575] slab_reclaimable:22669 slab_unreclaimable:127697 [ 1870.412575] mapped:601397 shmem:610054 pagetables:31104 bounce:0 [ 1870.412575] free:22738 free_pcp:91 free_cma:0 [ 1870.461236] Node 0 active_anon:871772kB inactive_anon:1015456kB active_file:4kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1870.511349] Node 1 active_anon:2174652kB inactive_anon:1183164kB active_file:152kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:1181536kB dirty:40kB writeback:140kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1870.547872] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1870.586688] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1870.594768] Node 0 DMA32 free:27672kB min:36384kB low:45480kB high:54576kB active_anon:870812kB inactive_anon:1011236kB active_file:4kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18336kB pagetables:30644kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 1870.658030] lowmem_reserve[]: 0 0 0 0 0 [ 1870.677271] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1870.726230] lowmem_reserve[]: 0 0 0 0 0 [ 1870.731449] Node 1 Normal free:54372kB min:53504kB low:66880kB high:80256kB active_anon:2174652kB inactive_anon:1183164kB active_file:484kB inactive_file:776kB unevictable:0kB writepending:180kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24192kB pagetables:93764kB bounce:0kB free_pcp:300kB local_pcp:172kB free_cma:0kB [ 1870.773170] lowmem_reserve[]: 0 0 0 0 0 [ 1870.777783] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1870.812886] Node 0 DMA32: 483*4kB (UME) 1960*8kB (UME) 121*16kB (UME) 12*32kB (UME) 62*64kB (UM) 14*128kB (M) 4*256kB (UM) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 27740kB [ 1870.870200] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1870.895716] Node 1 Normal: 1790*4kB (UME) 450*8kB (UM) 95*16kB (UME) 11*32kB (UME) 137*64kB (ME) 193*128kB (ME) 34*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54808kB [ 1870.911495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1870.920491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1870.929118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1870.938157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1870.946858] 610102 total pagecache pages [ 1870.952328] 0 pages in swap cache [ 1870.955799] Swap cache stats: add 0, delete 0, find 0/0 [ 1870.961376] Free swap = 0kB [ 1870.964620] Total swap = 0kB [ 1870.967798] 1965979 pages RAM [ 1870.988197] 0 pages HighMem/MovableOnly [ 1870.993422] 335855 pages reserved [ 1870.997245] 0 pages cma reserved [ 1871.000996] Out of memory: Kill process 10348 (syz-executor.2) score 1007 or sacrifice child [ 1871.046809] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1871.078634] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1871.096073] CPU: 0 PID: 31766 Comm: syz-executor.3 Not tainted 4.14.169-syzkaller #0 [ 1871.103981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1871.113343] Call Trace: [ 1871.115943] dump_stack+0x142/0x197 [ 1871.119759] dump_header+0x177/0x6cd [ 1871.123487] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1871.128605] ? ___ratelimit+0x55/0x537 [ 1871.132510] oom_kill_process.cold+0x10/0xadd [ 1871.137012] ? oom_unkillable_task+0x294/0x390 [ 1871.141644] ? lock_downgrade+0x740/0x740 [ 1871.145785] out_of_memory+0x2ee/0x1180 [ 1871.149755] ? lock_acquire+0x16f/0x430 [ 1871.153718] ? oom_killer_disable+0x1d0/0x1d0 [ 1871.158200] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1871.163126] __alloc_pages_slowpath+0x2251/0x2930 [ 1871.167975] ? warn_alloc+0xf0/0xf0 [ 1871.171594] ? __might_sleep+0x93/0xb0 [ 1871.175467] __alloc_pages_nodemask+0x62c/0x7a0 [ 1871.180209] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1871.185210] ? ____cache_alloc_node+0x1be/0x1d0 [ 1871.189874] ? cache_grow_begin+0x335/0x400 [ 1871.194182] cache_grow_begin+0x80/0x400 [ 1871.198226] ? __cpuset_node_allowed+0xff/0x450 [ 1871.202913] fallback_alloc+0x1fd/0x2c0 [ 1871.206963] ____cache_alloc_node+0x1be/0x1d0 [ 1871.211446] kmem_cache_alloc+0x1f3/0x780 [ 1871.215578] ? trace_hardirqs_on+0x10/0x10 [ 1871.219813] getname_flags+0xcb/0x580 [ 1871.223600] user_path_at_empty+0x2f/0x50 [ 1871.227732] vfs_statx+0xcd/0x160 [ 1871.231172] ? vfs_statx_fd+0xa0/0xa0 [ 1871.234961] SYSC_newlstat+0x95/0x100 [ 1871.238762] ? SYSC_newstat+0x100/0x100 [ 1871.242727] ? mntput_no_expire+0xfa/0x850 [ 1871.246951] ? SyS_umount+0x173/0x380 [ 1871.250834] ? __do_page_fault+0x358/0xb80 [ 1871.255072] ? do_syscall_64+0x53/0x640 [ 1871.259039] ? SyS_newstat+0x30/0x30 [ 1871.262735] SyS_newlstat+0x1e/0x30 [ 1871.266346] do_syscall_64+0x1e8/0x640 [ 1871.270229] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1871.275060] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1871.280235] RIP: 0033:0x45a755 [ 1871.283577] RSP: 002b:00007ffdd0b8ec48 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1871.291292] RAX: ffffffffffffffda RBX: 00000000001c8586 RCX: 000000000045a755 [ 1871.298556] RDX: 00007ffdd0b8ec60 RSI: 00007ffdd0b8ec60 RDI: 00007ffdd0b8ecf0 [ 1871.305816] RBP: 00000000000004af R08: 0000000000000000 R09: 000000000000000c [ 1871.313072] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffdd0b8fd80 [ 1871.320328] R13: 000000000140e940 R14: 0000000000000000 R15: 00007ffdd0b8fd80 [ 1871.332694] Mem-Info: [ 1871.335147] active_anon:761606 inactive_anon:549655 isolated_anon:0 [ 1871.335147] active_file:4 inactive_file:26 isolated_file:26 [ 1871.335147] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1871.335147] slab_reclaimable:22658 slab_unreclaimable:127542 [ 1871.335147] mapped:601278 shmem:610054 pagetables:31104 bounce:0 [ 1871.335147] free:23138 free_pcp:59 free_cma:0 [ 1871.369689] Node 0 active_anon:871772kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1871.407795] Node 1 active_anon:2174652kB inactive_anon:1183164kB active_file:116kB inactive_file:152kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:1181588kB dirty:0kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1871.437185] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1871.467000] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1871.472686] Node 0 DMA32 free:27740kB min:36384kB low:45480kB high:54576kB active_anon:870812kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18336kB pagetables:30644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1871.510173] lowmem_reserve[]: 0 0 0 0 0 [ 1871.514293] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1871.541359] lowmem_reserve[]: 0 0 0 0 0 [ 1871.545555] Node 1 Normal free:53764kB min:53504kB low:66880kB high:80256kB active_anon:2174652kB inactive_anon:1183164kB active_file:0kB inactive_file:528kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24192kB pagetables:93764kB bounce:0kB free_pcp:552kB local_pcp:28kB free_cma:0kB [ 1871.575927] lowmem_reserve[]: 0 0 0 0 0 [ 1871.582920] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1871.599485] Node 0 DMA32: 483*4kB (UME) 1960*8kB (UME) 121*16kB (UME) 12*32kB (UME) 62*64kB (UM) 14*128kB (M) 4*256kB (UM) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 27740kB [ 1871.615985] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1871.634906] Node 1 Normal: 1516*4kB (UME) 450*8kB (UM) 95*16kB (UME) 12*32kB (UME) 137*64kB (ME) 193*128kB (ME) 34*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53744kB [ 1871.650485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1871.659326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1871.669312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1871.678330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1871.686998] 610108 total pagecache pages [ 1871.691188] 0 pages in swap cache [ 1871.694646] Swap cache stats: add 0, delete 0, find 0/0 [ 1871.700008] Free swap = 0kB [ 1871.704340] Total swap = 0kB [ 1871.707360] 1965979 pages RAM [ 1871.710563] 0 pages HighMem/MovableOnly [ 1871.714569] 335855 pages reserved [ 1871.718022] 0 pages cma reserved [ 1871.721466] Out of memory: Kill process 10363 (syz-executor.2) score 1007 or sacrifice child [ 1871.730883] Killed process 10363 (syz-executor.2) total-vm:72984kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB 21:06:06 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x0, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:06:06 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:06:06 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:06:06 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x16) [ 1872.942406] modprobe invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1872.974405] modprobe cpuset=/ mems_allowed=0-1 [ 1872.979046] CPU: 1 PID: 10368 Comm: modprobe Not tainted 4.14.169-syzkaller #0 [ 1872.986495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1872.995852] Call Trace: [ 1872.998453] dump_stack+0x142/0x197 [ 1873.002125] dump_header+0x177/0x6cd [ 1873.005848] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1873.010962] ? ___ratelimit+0x55/0x537 [ 1873.014867] oom_kill_process.cold+0x10/0xadd [ 1873.019370] ? rcu_read_unlock_special+0x895/0xd40 [ 1873.024314] ? lock_downgrade+0x740/0x740 [ 1873.028560] out_of_memory+0x2ee/0x1180 [ 1873.032544] ? lock_acquire+0x16f/0x430 [ 1873.036535] ? oom_killer_disable+0x1d0/0x1d0 [ 1873.041039] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1873.045985] __alloc_pages_slowpath+0x2251/0x2930 [ 1873.050869] ? __lock_acquire+0x5f7/0x4620 [ 1873.055113] ? warn_alloc+0xf0/0xf0 [ 1873.058759] ? __might_sleep+0x93/0xb0 [ 1873.062657] __alloc_pages_nodemask+0x62c/0x7a0 [ 1873.067482] ? lock_acquire+0x16f/0x430 [ 1873.071467] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1873.076487] ? alloc_set_pte+0xaf7/0x13e0 [ 1873.080647] ? save_trace+0x290/0x290 [ 1873.084452] ? get_task_policy.part.0+0x85/0xa0 [ 1873.089128] alloc_pages_vma+0xc9/0x4c0 [ 1873.093117] wp_page_copy+0x1f8/0x13d0 [ 1873.097015] ? follow_pfn+0x220/0x220 [ 1873.100818] ? do_raw_spin_unlock+0x174/0x260 [ 1873.105321] do_wp_page+0x24b/0x1250 [ 1873.109044] ? finish_mkwrite_fault+0x620/0x620 [ 1873.113731] __handle_mm_fault+0x1cc3/0x33d0 [ 1873.118161] ? copy_page_range+0x1de0/0x1de0 [ 1873.122582] ? find_held_lock+0x35/0x130 [ 1873.126647] ? handle_mm_fault+0x1b6/0x7c0 [ 1873.130904] handle_mm_fault+0x293/0x7c0 [ 1873.134976] __do_page_fault+0x4c1/0xb80 [ 1873.139051] ? vmalloc_fault+0xe30/0xe30 [ 1873.143121] ? page_fault+0x2f/0x50 [ 1873.146755] do_page_fault+0x71/0x511 [ 1873.150572] ? page_fault+0x2f/0x50 [ 1873.154203] page_fault+0x45/0x50 [ 1873.157654] RIP: 0033:0x7f3ceb2996de [ 1873.161368] RSP: 002b:00007fffb3a8ea60 EFLAGS: 00010206 [ 1873.166743] RAX: 00007f3ceacf0000 RBX: 00007f3ceb4b19a8 RCX: 00007f3ceb4b19e8 [ 1873.174019] RDX: 00007f3ceb076b90 RSI: 0000000000000030 RDI: 000000006fffffff [ 1873.181289] RBP: 00007fffb3a8ebc0 R08: 0000000070000029 R09: 000000006ffffdff [ 1873.188564] R10: 000000006ffffeff R11: 000000006ffffe3c R12: 00007fffb3a8eca8 [ 1873.195837] R13: 000000006fffff48 R14: 00007fffb3a8e910 R15: 00007fffb3a8e8b0 [ 1873.295849] Mem-Info: [ 1873.298428] active_anon:761628 inactive_anon:549652 isolated_anon:0 [ 1873.298428] active_file:419 inactive_file:480 isolated_file:46 [ 1873.298428] unevictable:0 dirty:73 writeback:3 unstable:0 [ 1873.298428] slab_reclaimable:22618 slab_unreclaimable:127566 [ 1873.298428] mapped:602039 shmem:610054 pagetables:31092 bounce:0 [ 1873.298428] free:22342 free_pcp:0 free_cma:0 [ 1873.342807] Node 0 active_anon:871576kB inactive_anon:1015456kB active_file:4kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1873.380886] Node 1 active_anon:2174936kB inactive_anon:1183152kB active_file:1488kB inactive_file:1328kB unevictable:0kB isolated(anon):0kB isolated(file):224kB mapped:1183932kB dirty:292kB writeback:12kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1873.435415] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1873.468128] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1873.473265] Node 0 DMA32 free:27732kB min:36384kB low:45480kB high:54576kB active_anon:870616kB inactive_anon:1011236kB active_file:4kB inactive_file:208kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18368kB pagetables:30644kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1873.524848] lowmem_reserve[]: 0 0 0 0 0 [ 1873.528896] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1873.562828] lowmem_reserve[]: 0 0 0 0 0 [ 1873.567064] Node 1 Normal free:51812kB min:53504kB low:66880kB high:80256kB active_anon:2174936kB inactive_anon:1183152kB active_file:1288kB inactive_file:1700kB unevictable:0kB writepending:304kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24256kB pagetables:93716kB bounce:0kB free_pcp:412kB local_pcp:40kB free_cma:0kB [ 1873.603370] lowmem_reserve[]: 0 0 0 0 0 [ 1873.607434] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1873.629082] Node 0 DMA32: 505*4kB (UME) 1952*8kB (UME) 127*16kB (UME) 13*32kB (UME) 61*64kB (M) 14*128kB (M) 4*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 27828kB [ 1873.649727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1873.665232] Node 1 Normal: 1454*4kB (UME) 205*8kB (UME) 81*16kB (UME) 48*32kB (UME) 140*64kB (UME) 193*128kB (UM) 34*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52656kB [ 1873.691131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1873.703357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1873.714021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1873.735055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1873.749786] 610529 total pagecache pages [ 1873.760133] 0 pages in swap cache [ 1873.763612] Swap cache stats: add 0, delete 0, find 0/0 [ 1873.774302] Free swap = 0kB [ 1873.777354] Total swap = 0kB [ 1873.780523] 1965979 pages RAM [ 1873.783633] 0 pages HighMem/MovableOnly [ 1873.787604] 335855 pages reserved [ 1873.791155] 0 pages cma reserved [ 1873.794522] Out of memory: Kill process 10370 (syz-executor.0) score 1007 or sacrifice child [ 1873.948786] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1873.961671] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1873.966465] CPU: 1 PID: 7371 Comm: syz-fuzzer Not tainted 4.14.169-syzkaller #0 [ 1873.973942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1873.983313] Call Trace: [ 1873.985896] dump_stack+0x142/0x197 [ 1873.989520] dump_header+0x177/0x6cd [ 1873.993220] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1873.998308] ? ___ratelimit+0x55/0x537 [ 1874.002181] oom_kill_process.cold+0x10/0xadd [ 1874.006659] ? oom_unkillable_task+0x294/0x390 [ 1874.011227] ? lock_downgrade+0x740/0x740 [ 1874.015362] out_of_memory+0x2ee/0x1180 [ 1874.019321] ? lock_acquire+0x16f/0x430 [ 1874.023285] ? oom_killer_disable+0x1d0/0x1d0 [ 1874.027784] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1874.032697] __alloc_pages_slowpath+0x2251/0x2930 [ 1874.037525] ? __alloc_pages_nodemask+0x639/0x7a0 [ 1874.042374] ? warn_alloc+0xf0/0xf0 [ 1874.046006] ? __might_sleep+0x93/0xb0 [ 1874.049888] __alloc_pages_nodemask+0x62c/0x7a0 [ 1874.054564] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1874.059574] ? lock_downgrade+0x740/0x740 [ 1874.063717] alloc_pages_current+0xec/0x1e0 [ 1874.068025] __page_cache_alloc+0x248/0x3e0 [ 1874.072331] filemap_fault+0xcef/0x1de0 [ 1874.076288] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1874.081208] ? __lock_page_or_retry+0x8d0/0x8d0 [ 1874.085860] ? lock_acquire+0x16f/0x430 [ 1874.089816] ? ext4_filemap_fault+0x7b/0xb0 [ 1874.094125] ext4_filemap_fault+0x83/0xb0 [ 1874.098257] __do_fault+0x104/0x390 [ 1874.101870] __handle_mm_fault+0x23bd/0x33d0 [ 1874.106273] ? copy_page_range+0x1de0/0x1de0 [ 1874.110750] ? find_held_lock+0x35/0x130 [ 1874.114793] ? handle_mm_fault+0x1b6/0x7c0 [ 1874.119023] handle_mm_fault+0x293/0x7c0 [ 1874.123342] __do_page_fault+0x4c1/0xb80 [ 1874.127401] ? firmware_map_remove+0x196/0x196 [ 1874.131984] ? vmalloc_fault+0xe30/0xe30 [ 1874.136147] ? page_fault+0x2f/0x50 [ 1874.139765] do_page_fault+0x71/0x511 [ 1874.143565] ? page_fault+0x2f/0x50 [ 1874.149264] page_fault+0x45/0x50 [ 1874.152699] RIP: 0033:0x714393 [ 1874.155870] RSP: 002b:000000c4398534b0 EFLAGS: 00010202 [ 1874.161313] RAX: 0000000000000008 RBX: 0000000000722ebc RCX: 0000000000000000 [ 1874.168588] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000c420085cb0 [ 1874.175860] RBP: 000000c4398534c0 R08: 000000c420085b00 R09: 0000000000000000 [ 1874.183134] R10: 00000000009e8706 R11: 0000000000000004 R12: 0000000000000000 [ 1874.190407] R13: 0000000000000020 R14: 0000000000000013 R15: 0000000000000100 [ 1874.247051] Mem-Info: [ 1874.249515] active_anon:761629 inactive_anon:549652 isolated_anon:0 [ 1874.249515] active_file:40 inactive_file:112 isolated_file:35 [ 1874.249515] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1874.249515] slab_reclaimable:22618 slab_unreclaimable:127577 [ 1874.249515] mapped:601333 shmem:610054 pagetables:31092 bounce:0 [ 1874.249515] free:23082 free_pcp:111 free_cma:0 [ 1874.289641] Node 0 active_anon:871576kB inactive_anon:1015456kB active_file:4kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1874.332696] Node 1 active_anon:2174940kB inactive_anon:1183152kB active_file:256kB inactive_file:176kB unevictable:0kB isolated(anon):0kB isolated(file):140kB mapped:1181708kB dirty:0kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1874.370412] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1874.414449] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1874.419612] Node 0 DMA32 free:27876kB min:36384kB low:45480kB high:54576kB active_anon:870616kB inactive_anon:1011236kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18368kB pagetables:30644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1874.482201] lowmem_reserve[]: 0 0 0 0 0 [ 1874.486318] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1874.517601] lowmem_reserve[]: 0 0 0 0 0 [ 1874.522813] Node 1 Normal free:54024kB min:53504kB low:66880kB high:80256kB active_anon:2174940kB inactive_anon:1183152kB active_file:280kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24160kB pagetables:93716kB bounce:0kB free_pcp:584kB local_pcp:120kB free_cma:0kB [ 1874.557942] lowmem_reserve[]: 0 0 0 0 0 [ 1874.562000] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1874.592301] Node 0 DMA32: 505*4kB (UME) 1953*8kB (UME) 130*16kB (UME) 13*32kB (UME) 61*64kB (M) 14*128kB (M) 4*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 27884kB [ 1874.615877] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1874.629330] Node 1 Normal: 1606*4kB (UME) 243*8kB (UME) 95*16kB (UME) 54*32kB (UME) 141*64kB (UME) 193*128kB (UM) 34*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54048kB [ 1874.655565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1874.668871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1874.679634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1874.692773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1874.718345] 610145 total pagecache pages [ 1874.726664] 0 pages in swap cache [ 1874.756626] Swap cache stats: add 0, delete 0, find 0/0 [ 1874.762136] Free swap = 0kB [ 1874.765162] Total swap = 0kB [ 1874.768179] 1965979 pages RAM [ 1874.785244] 0 pages HighMem/MovableOnly [ 1874.789317] 335855 pages reserved [ 1874.798960] 0 pages cma reserved [ 1874.802525] Out of memory: Kill process 10381 (syz-executor.0) score 1007 or sacrifice child [ 1874.815915] Killed process 10381 (syz-executor.0) total-vm:73116kB, anon-rss:16560kB, file-rss:34844kB, shmem-rss:0kB 21:06:09 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:06:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 21:06:09 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x0, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) [ 1875.727912] syz-executor.4 invoked oom-killer: gfp_mask=0x15200c2(GFP_HIGHUSER|__GFP_ACCOUNT), nodemask=(null), order=0, oom_score_adj=1000 [ 1875.746569] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1875.753509] CPU: 1 PID: 10382 Comm: syz-executor.4 Not tainted 4.14.169-syzkaller #0 [ 1875.761410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1875.770782] Call Trace: [ 1875.773377] dump_stack+0x142/0x197 [ 1875.776997] dump_header+0x177/0x6cd [ 1875.780707] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1875.785804] ? ___ratelimit+0x55/0x537 [ 1875.789679] oom_kill_process.cold+0x10/0xadd [ 1875.794161] ? rcu_read_unlock_special+0x895/0xd40 [ 1875.799079] ? lock_downgrade+0x740/0x740 [ 1875.803218] out_of_memory+0x2ee/0x1180 [ 1875.810658] ? lock_acquire+0x16f/0x430 [ 1875.814624] ? oom_killer_disable+0x1d0/0x1d0 [ 1875.819106] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1875.824045] __alloc_pages_slowpath+0x2251/0x2930 [ 1875.828894] ? warn_alloc+0xf0/0xf0 [ 1875.832512] ? __might_sleep+0x93/0xb0 [ 1875.836384] __alloc_pages_nodemask+0x62c/0x7a0 [ 1875.841142] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1875.846152] alloc_pages_current+0xec/0x1e0 [ 1875.850460] pipe_write+0x942/0xe40 [ 1875.854080] __vfs_write+0x4a7/0x6b0 [ 1875.857778] ? selinux_file_open+0x420/0x420 [ 1875.862172] ? kernel_read+0x120/0x120 [ 1875.866428] ? rw_verify_area+0xea/0x2b0 [ 1875.870495] vfs_write+0x198/0x500 [ 1875.874027] SyS_write+0xfd/0x230 [ 1875.877476] ? SyS_read+0x230/0x230 [ 1875.881115] ? do_syscall_64+0x53/0x640 [ 1875.885095] ? SyS_read+0x230/0x230 [ 1875.888716] do_syscall_64+0x1e8/0x640 [ 1875.892607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1875.897452] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1875.902637] RIP: 0033:0x45b399 [ 1875.905813] RSP: 002b:00007f2227884c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1875.913510] RAX: ffffffffffffffda RBX: 00007f22278856d4 RCX: 000000000045b399 [ 1875.920772] RDX: 00000000fffffdc6 RSI: 00000000200004c0 RDI: 0000000000000008 [ 1875.928026] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1875.935287] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1875.942542] R13: 0000000000000c16 R14: 00000000004c8b8b R15: 000000000075bfd4 [ 1875.961374] Mem-Info: [ 1875.963895] active_anon:762631 inactive_anon:549653 isolated_anon:0 [ 1875.963895] active_file:367 inactive_file:374 isolated_file:22 [ 1875.963895] unevictable:0 dirty:32 writeback:14 unstable:0 [ 1875.963895] slab_reclaimable:22615 slab_unreclaimable:127749 [ 1875.963895] mapped:601922 shmem:610054 pagetables:31108 bounce:0 [ 1875.963895] free:21097 free_pcp:3 free_cma:0 [ 1876.085226] Node 0 active_anon:871996kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1876.124527] Node 1 active_anon:2178572kB inactive_anon:1183156kB active_file:964kB inactive_file:992kB unevictable:0kB isolated(anon):0kB isolated(file):340kB mapped:1183320kB dirty:196kB writeback:8kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1876.163136] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1876.202874] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1876.208109] Node 0 DMA32 free:27400kB min:36384kB low:45480kB high:54576kB active_anon:871036kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18368kB pagetables:30644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1876.246060] lowmem_reserve[]: 0 0 0 0 0 [ 1876.250925] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1876.285151] lowmem_reserve[]: 0 0 0 0 0 [ 1876.300827] Node 1 Normal free:49080kB min:53504kB low:66880kB high:80256kB active_anon:2178572kB inactive_anon:1183156kB active_file:964kB inactive_file:992kB unevictable:0kB writepending:204kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24224kB pagetables:93844kB bounce:0kB free_pcp:316kB local_pcp:192kB free_cma:0kB [ 1876.380076] lowmem_reserve[]: 0 0 0 0 0 [ 1876.384114] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1876.420087] Node 0 DMA32: 462*4kB (UME) 1948*8kB (UME) 123*16kB (UME) 8*32kB (UME) 61*64kB (M) 14*128kB (M) 4*256kB (UM) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 27400kB [ 1876.439983] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1876.460367] Node 1 Normal: 1199*4kB (UME) 162*8kB (UME) 74*16kB (UME) 7*32kB (UME) 143*64kB (UME) 193*128kB (UM) 34*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50060kB [ 1876.483814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1876.492992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1876.501689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1876.510781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1876.519387] 610243 total pagecache pages [ 1876.527924] 0 pages in swap cache [ 1876.531447] Swap cache stats: add 0, delete 0, find 0/0 [ 1876.536847] Free swap = 0kB [ 1876.539881] Total swap = 0kB [ 1876.542998] 1965979 pages RAM [ 1876.546106] 0 pages HighMem/MovableOnly [ 1876.550308] 335855 pages reserved [ 1876.553767] 0 pages cma reserved [ 1876.557137] Out of memory: Kill process 10387 (syz-executor.2) score 1007 or sacrifice child [ 1876.677411] oom_reaper: reaped process 10385 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1881.341423] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1881.398697] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 1881.404276] CPU: 0 PID: 11473 Comm: syz-executor.1 Not tainted 4.14.169-syzkaller #0 [ 1881.412168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1881.421701] Call Trace: [ 1881.424301] dump_stack+0x142/0x197 [ 1881.428099] dump_header+0x177/0x6cd [ 1881.431827] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1881.436943] ? ___ratelimit+0x55/0x537 [ 1881.440853] oom_kill_process.cold+0x10/0xadd [ 1881.445499] ? rcu_read_unlock_special+0x895/0xd40 [ 1881.450444] ? lock_downgrade+0x740/0x740 [ 1881.454613] out_of_memory+0x2ee/0x1180 [ 1881.458600] ? lock_acquire+0x16f/0x430 [ 1881.462707] ? oom_killer_disable+0x1d0/0x1d0 [ 1881.467219] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1881.472161] __alloc_pages_slowpath+0x2251/0x2930 [ 1881.477129] ? warn_alloc+0xf0/0xf0 [ 1881.480788] ? __might_sleep+0x93/0xb0 [ 1881.484686] __alloc_pages_nodemask+0x62c/0x7a0 [ 1881.489367] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1881.494512] ? ____cache_alloc_node+0x1be/0x1d0 [ 1881.499196] ? cache_grow_begin+0x335/0x400 [ 1881.503538] cache_grow_begin+0x80/0x400 [ 1881.507604] ? __cpuset_node_allowed+0xff/0x450 [ 1881.512422] fallback_alloc+0x1fd/0x2c0 [ 1881.516383] ____cache_alloc_node+0x1be/0x1d0 [ 1881.520916] kmem_cache_alloc+0x1f3/0x780 [ 1881.525139] ? trace_hardirqs_on+0x10/0x10 [ 1881.529374] getname_flags+0xcb/0x580 [ 1881.533161] user_path_at_empty+0x2f/0x50 [ 1881.537305] vfs_statx+0xcd/0x160 [ 1881.540743] ? vfs_statx_fd+0xa0/0xa0 [ 1881.544541] SYSC_newlstat+0x95/0x100 [ 1881.548334] ? SYSC_newstat+0x100/0x100 [ 1881.553229] ? mntput_no_expire+0xfa/0x850 [ 1881.557460] ? SyS_umount+0x173/0x380 [ 1881.561242] ? __do_page_fault+0x358/0xb80 [ 1881.565496] ? do_syscall_64+0x53/0x640 [ 1881.569605] ? SyS_newstat+0x30/0x30 [ 1881.573422] SyS_newlstat+0x1e/0x30 [ 1881.577040] do_syscall_64+0x1e8/0x640 [ 1881.580931] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1881.585775] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1881.590951] RIP: 0033:0x45a755 [ 1881.594132] RSP: 002b:00007fffb69f5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1881.601835] RAX: ffffffffffffffda RBX: 000000000000002f RCX: 000000000045a755 [ 1881.609215] RDX: 00007fffb69f5060 RSI: 00007fffb69f5060 RDI: 00007fffb69f50f0 [ 1881.616482] RBP: 0000000000000dce R08: 0000000000000000 R09: 000000000000000c [ 1881.623748] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fffb69f6180 [ 1881.631188] R13: 000000000162f940 R14: 0000000000000000 R15: 00007fffb69f6180 [ 1881.641080] Mem-Info: [ 1881.643528] active_anon:761606 inactive_anon:549653 isolated_anon:0 [ 1881.643528] active_file:11 inactive_file:27 isolated_file:15 [ 1881.643528] unevictable:0 dirty:0 writeback:2 unstable:0 [ 1881.643528] slab_reclaimable:22578 slab_unreclaimable:127325 [ 1881.643528] mapped:601244 shmem:610054 pagetables:31083 bounce:0 [ 1881.643528] free:23177 free_pcp:182 free_cma:0 [ 1881.678302] Node 0 active_anon:871996kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1881.715458] Node 1 active_anon:2174428kB inactive_anon:1183156kB active_file:44kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:1181552kB dirty:0kB writeback:8kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1881.744367] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1881.772758] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1881.778050] Node 0 DMA32 free:27460kB min:36384kB low:45480kB high:54576kB active_anon:871036kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18368kB pagetables:30644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1881.807269] lowmem_reserve[]: 0 0 0 0 0 [ 1881.812081] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1881.840722] lowmem_reserve[]: 0 0 0 0 0 [ 1881.845484] Node 1 Normal free:54784kB min:53504kB low:66880kB high:80256kB active_anon:2174428kB inactive_anon:1183156kB active_file:0kB inactive_file:684kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24128kB pagetables:93680kB bounce:0kB free_pcp:488kB local_pcp:32kB free_cma:0kB [ 1881.876230] lowmem_reserve[]: 0 0 0 0 0 [ 1881.880975] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1881.899503] Node 0 DMA32: 465*4kB (UME) 1950*8kB (UME) 125*16kB (UME) 8*32kB (UME) 61*64kB (M) 14*128kB (M) 4*256kB (UM) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 27460kB [ 1881.915982] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1881.927769] Node 1 Normal: 1462*4kB (UME) 483*8kB (UME) 116*16kB (UME) 12*32kB (UME) 143*64kB (UME) 193*128kB (UM) 34*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54512kB [ 1881.944565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1881.956607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1881.966089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1881.975736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1881.985142] 610190 total pagecache pages [ 1881.990271] 0 pages in swap cache [ 1881.994610] Swap cache stats: add 0, delete 0, find 0/0 [ 1882.001062] Free swap = 0kB [ 1882.004800] Total swap = 0kB [ 1882.008559] 1965979 pages RAM [ 1882.014706] 0 pages HighMem/MovableOnly [ 1882.019422] 335855 pages reserved [ 1882.023698] 0 pages cma reserved [ 1882.027718] Out of memory: Kill process 10394 (syz-executor.2) score 1007 or sacrifice child [ 1882.037183] Killed process 10394 (syz-executor.2) total-vm:72984kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB 21:06:16 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:06:16 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:06:16 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:06:16 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x16) [ 1883.289325] kworker/u4:9 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1883.378269] kworker/u4:9 cpuset=/ mems_allowed=0-1 [ 1883.400160] CPU: 1 PID: 8706 Comm: kworker/u4:9 Not tainted 4.14.169-syzkaller #0 [ 1883.408109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1883.417737] Workqueue: events_unbound call_usermodehelper_exec_work [ 1883.424154] Call Trace: [ 1883.426770] dump_stack+0x142/0x197 [ 1883.430421] dump_header+0x177/0x6cd [ 1883.434312] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1883.439446] ? ___ratelimit+0x55/0x537 [ 1883.443382] oom_kill_process.cold+0x10/0xadd [ 1883.448037] ? rcu_read_unlock_special+0x895/0xd40 [ 1883.452996] ? lock_downgrade+0x740/0x740 [ 1883.457313] out_of_memory+0x2ee/0x1180 [ 1883.461305] ? lock_acquire+0x16f/0x430 [ 1883.465288] ? oom_killer_disable+0x1d0/0x1d0 [ 1883.470617] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1883.475545] __alloc_pages_slowpath+0x2251/0x2930 [ 1883.480400] ? warn_alloc+0xf0/0xf0 [ 1883.484039] ? __might_sleep+0x93/0xb0 [ 1883.487940] __alloc_pages_nodemask+0x62c/0x7a0 [ 1883.492697] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1883.497722] ? rcu_read_lock_sched_held+0x110/0x130 [ 1883.503376] copy_process.part.0+0x26a/0x6a70 [ 1883.507895] ? __lock_acquire+0x5f7/0x4620 [ 1883.512128] ? finish_task_switch+0x178/0x650 [ 1883.516632] ? mark_held_locks+0xb1/0x100 [ 1883.520773] ? trace_hardirqs_on+0x10/0x10 [ 1883.525015] ? umh_complete+0x90/0x90 [ 1883.528913] ? __cleanup_sighand+0x50/0x50 [ 1883.533143] ? kernel_sigaction+0x147/0x210 [ 1883.537505] ? find_held_lock+0x35/0x130 [ 1883.541682] _do_fork+0x19e/0xce0 [ 1883.545154] ? umh_complete+0x90/0x90 [ 1883.548961] ? fork_idle+0x280/0x280 [ 1883.552705] ? trace_hardirqs_on_caller+0x400/0x590 [ 1883.557831] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1883.562339] ? kernel_sigaction+0x147/0x210 [ 1883.566718] ? recalc_sigpending+0xa0/0xa0 [ 1883.570956] ? umh_complete+0x90/0x90 [ 1883.574771] kernel_thread+0x34/0x40 [ 1883.578597] call_usermodehelper_exec_work+0xa4/0x220 [ 1883.584218] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 1883.589960] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1883.595474] process_one_work+0x863/0x1600 [ 1883.599728] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 1883.604400] worker_thread+0x5d9/0x1050 [ 1883.608409] kthread+0x319/0x430 [ 1883.611800] ? process_one_work+0x1600/0x1600 [ 1883.616296] ? kthread_create_on_node+0xd0/0xd0 [ 1883.621032] ret_from_fork+0x24/0x30 [ 1883.886077] Mem-Info: [ 1883.889785] active_anon:761681 inactive_anon:549653 isolated_anon:0 [ 1883.889785] active_file:292 inactive_file:266 isolated_file:32 [ 1883.889785] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1883.889785] slab_reclaimable:22547 slab_unreclaimable:127446 [ 1883.889785] mapped:601842 shmem:610054 pagetables:31169 bounce:0 [ 1883.889785] free:22743 free_pcp:41 free_cma:0 [ 1883.932715] Node 0 active_anon:871852kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1883.966370] Node 1 active_anon:2174872kB inactive_anon:1183156kB active_file:892kB inactive_file:920kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1183344kB dirty:40kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1884.019195] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1884.083655] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1884.089413] Node 0 DMA32 free:27544kB min:36384kB low:45480kB high:54576kB active_anon:870864kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18368kB pagetables:30644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1884.227445] lowmem_reserve[]: 0 0 0 0 0 [ 1884.231585] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1884.257933] lowmem_reserve[]: 0 0 0 0 0 [ 1884.262033] Node 1 Normal free:53420kB min:53504kB low:66880kB high:80256kB active_anon:2174776kB inactive_anon:1183156kB active_file:776kB inactive_file:1028kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24224kB pagetables:93924kB bounce:0kB free_pcp:812kB local_pcp:348kB free_cma:0kB [ 1884.292516] lowmem_reserve[]: 0 0 0 0 0 [ 1884.296529] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1884.312515] Node 0 DMA32: 476*4kB (UME) 1965*8kB (UME) 124*16kB (UME) 12*32kB (UME) 62*64kB (UM) 14*128kB (M) 3*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 27544kB [ 1884.337048] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1884.348022] Node 1 Normal: 1538*4kB (UME) 374*8kB (UME) 74*16kB (UME) 44*32kB (UME) 152*64kB (UME) 193*128kB (UM) 34*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54872kB [ 1884.363796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1884.373009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1884.382224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1884.391299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1884.400242] 610240 total pagecache pages [ 1884.404607] 0 pages in swap cache [ 1884.408093] Swap cache stats: add 0, delete 0, find 0/0 [ 1884.413521] Free swap = 0kB [ 1884.416540] Total swap = 0kB [ 1884.419598] 1965979 pages RAM [ 1884.422796] 0 pages HighMem/MovableOnly [ 1884.426797] 335855 pages reserved [ 1884.430323] 0 pages cma reserved [ 1884.433809] Out of memory: Kill process 10404 (syz-executor.0) score 1007 or sacrifice child [ 1884.553619] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1884.567308] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1884.573133] CPU: 0 PID: 7394 Comm: syz-executor.2 Not tainted 4.14.169-syzkaller #0 [ 1884.580940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1884.590296] Call Trace: [ 1884.593013] dump_stack+0x142/0x197 [ 1884.596657] dump_header+0x177/0x6cd [ 1884.600879] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1884.606177] ? ___ratelimit+0x55/0x537 [ 1884.610632] oom_kill_process.cold+0x10/0xadd [ 1884.615141] ? rcu_read_unlock_special+0x895/0xd40 [ 1884.620084] ? lock_downgrade+0x740/0x740 [ 1884.624383] out_of_memory+0x2ee/0x1180 [ 1884.628391] ? lock_acquire+0x16f/0x430 [ 1884.632383] ? oom_killer_disable+0x1d0/0x1d0 [ 1884.636887] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1884.641828] __alloc_pages_slowpath+0x2251/0x2930 [ 1884.646839] ? warn_alloc+0xf0/0xf0 [ 1884.650485] ? __might_sleep+0x93/0xb0 [ 1884.654392] __alloc_pages_nodemask+0x62c/0x7a0 [ 1884.659072] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1884.664208] ? ____cache_alloc_node+0x1be/0x1d0 [ 1884.668904] ? cache_grow_begin+0x335/0x400 [ 1884.673340] cache_grow_begin+0x80/0x400 [ 1884.677412] ? __cpuset_node_allowed+0xff/0x450 [ 1884.682092] fallback_alloc+0x1fd/0x2c0 [ 1884.686084] ____cache_alloc_node+0x1be/0x1d0 [ 1884.690590] kmem_cache_alloc+0x1f3/0x780 [ 1884.695012] getname_flags+0xcb/0x580 [ 1884.698829] user_path_mountpoint_at+0x29/0x50 [ 1884.703498] SyS_umount+0x10c/0x380 [ 1884.707278] ? __do_page_fault+0x358/0xb80 [ 1884.711651] ? __detach_mounts+0x2f0/0x2f0 [ 1884.715903] ? do_syscall_64+0x53/0x640 [ 1884.719909] ? __detach_mounts+0x2f0/0x2f0 [ 1884.724257] do_syscall_64+0x1e8/0x640 [ 1884.728153] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1884.733010] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1884.738300] RIP: 0033:0x45ddc7 [ 1884.741491] RSP: 002b:00007ffe4bc91598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1884.749215] RAX: ffffffffffffffda RBX: 00000000001cbc79 RCX: 000000000045ddc7 [ 1884.756495] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe4bc926d0 [ 1884.763772] RBP: 0000000000000eec R08: 0000000000000001 R09: 00000000011b4940 [ 1884.771052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4bc926d0 [ 1884.778526] R13: 00007ffe4bc926c0 R14: 0000000000000000 R15: 00007ffe4bc926d0 [ 1884.791643] Mem-Info: [ 1884.794193] active_anon:761650 inactive_anon:549653 isolated_anon:0 [ 1884.794193] active_file:29 inactive_file:70 isolated_file:27 [ 1884.794193] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1884.794193] slab_reclaimable:22547 slab_unreclaimable:127424 [ 1884.794193] mapped:601288 shmem:610054 pagetables:31144 bounce:0 [ 1884.794193] free:23148 free_pcp:157 free_cma:0 [ 1884.828526] Node 0 active_anon:871824kB inactive_anon:1015456kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1884.857317] Node 1 active_anon:2174776kB inactive_anon:1183156kB active_file:108kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1181528kB dirty:0kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1884.886474] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1884.920138] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1884.925263] Node 0 DMA32 free:27544kB min:36384kB low:45480kB high:54576kB active_anon:870864kB inactive_anon:1011236kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18368kB pagetables:30644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1884.990389] lowmem_reserve[]: 0 0 0 0 0 [ 1884.994408] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1885.035246] lowmem_reserve[]: 0 0 0 0 0 [ 1885.039333] Node 1 Normal free:55072kB min:53504kB low:66880kB high:80256kB active_anon:2174776kB inactive_anon:1183156kB active_file:328kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24224kB pagetables:93924kB bounce:0kB free_pcp:372kB local_pcp:96kB free_cma:0kB [ 1885.069502] lowmem_reserve[]: 0 0 0 0 0 [ 1885.073585] Node 0 DMA: 3*4kB (UME) 10*8kB (UH) 4*16kB (H) 3*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1885.089473] Node 0 DMA32: 476*4kB (UME) 1965*8kB (UME) 124*16kB (UME) 12*32kB (UME) 62*64kB (UM) 14*128kB (M) 3*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 27544kB [ 1885.105663] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1885.117463] Node 1 Normal: 1378*4kB (UME) 415*8kB (UME) 75*16kB (UME) 44*32kB (UME) 152*64kB (UME) 193*128kB (UM) 34*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54576kB [ 1885.190129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1885.199048] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1885.218578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1885.227931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1885.237067] 610326 total pagecache pages [ 1885.241663] 0 pages in swap cache [ 1885.245904] Swap cache stats: add 0, delete 0, find 0/0 [ 1885.252157] Free swap = 0kB [ 1885.255813] Total swap = 0kB [ 1885.259452] 1965979 pages RAM [ 1885.263283] 0 pages HighMem/MovableOnly [ 1885.274295] 335855 pages reserved [ 1885.277807] 0 pages cma reserved [ 1885.283420] Out of memory: Kill process 10420 (syz-executor.0) score 1007 or sacrifice child [ 1885.292131] Killed process 10420 (syz-executor.0) total-vm:73116kB, anon-rss:16560kB, file-rss:34844kB, shmem-rss:0kB [ 1885.346667] oom_reaper: reaped process 10420 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:06:20 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:06:20 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x16) 21:06:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:06:20 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x27f, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:06:20 executing program 2: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:06:20 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) [ 1886.935906] FAT-fs (loop3): bogus number of reserved sectors [ 1886.944010] FAT-fs (loop3): Can't find a valid FAT filesystem 21:07:14 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) 21:07:16 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:07:18 executing program 2: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:07:19 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:07:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:07:21 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) [ 1948.039838] FAT-fs (loop3): bogus number of reserved sectors [ 1948.067483] FAT-fs (loop3): Can't find a valid FAT filesystem 21:07:22 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x27f, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:07:22 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) 21:07:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:07:36 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 21:07:36 executing program 2: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 1965.193584] FAT-fs (loop3): bogus number of reserved sectors [ 1965.199584] FAT-fs (loop3): Can't find a valid FAT filesystem 21:08:22 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:08:22 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) 21:08:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:08:23 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) [ 2011.448125] FAT-fs (loop3): bogus number of reserved sectors [ 2011.454222] FAT-fs (loop3): Can't find a valid FAT filesystem 21:08:52 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) 21:08:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:08:53 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x27f, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:08:53 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) [ 2043.309050] FAT-fs (loop3): bogus number of reserved sectors [ 2043.316587] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:11 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:09:11 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) 21:09:13 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) 21:09:13 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:09:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:13 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040), 0x8, 0x0) [ 2059.177859] FAT-fs (loop3): bogus number of reserved sectors [ 2059.193099] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:13 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) 21:09:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) [ 2059.692339] FAT-fs (loop3): bogus number of reserved sectors [ 2059.740615] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:14 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040), 0x8, 0x0) 21:09:14 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:09:14 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:09:14 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) 21:09:14 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:09:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:14 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) [ 2060.054556] FAT-fs (loop3): bogus number of reserved sectors [ 2060.075380] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:14 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:09:14 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:09:14 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) [ 2060.479734] FAT-fs (loop3): bogus number of reserved sectors [ 2060.495760] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:14 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(0x0, 0x16) 21:09:15 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/60}, 0x44, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040), 0x8, 0x0) 21:09:15 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:09:15 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:09:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:15 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) [ 2061.010213] FAT-fs (loop3): bogus number of reserved sectors [ 2061.021776] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:15 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:15 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:09:15 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2061.358186] FAT-fs (loop3): bogus number of reserved sectors [ 2061.376925] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:15 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:15 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(0x0, 0x16) 21:09:15 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:09:15 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2061.713861] FAT-fs (loop3): bogus number of reserved sectors [ 2061.744526] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:15 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:09:16 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x5, 0x0, &(0x7f00000001c0)) 21:09:16 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) [ 2062.039064] FAT-fs (loop3): bogus number of reserved sectors [ 2062.065521] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:16 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:09:16 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x5, 0x0, &(0x7f00000001c0)) [ 2062.324924] FAT-fs (loop3): bogus number of reserved sectors [ 2062.362261] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x5, 0x0, &(0x7f00000001c0)) 21:09:16 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:09:16 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(0x0, 0x16) 21:09:16 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:17 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:09:17 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2063.211592] FAT-fs (loop3): bogus number of reserved sectors [ 2063.228363] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:17 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x5, 0x0, &(0x7f00000001c0)) [ 2063.476472] FAT-fs (loop3): bogus number of reserved sectors [ 2063.483816] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:17 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:09:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x5, 0x0, &(0x7f00000001c0)) 21:09:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:17 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:09:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x5, 0x0, &(0x7f00000001c0)) [ 2063.766821] FAT-fs (loop3): bogus number of reserved sectors [ 2063.788633] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:18 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:09:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x5, 0x0, &(0x7f00000001c0)) 21:09:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:18 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:09:18 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:09:18 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) [ 2065.201168] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2065.220125] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 2065.225612] CPU: 0 PID: 7390 Comm: syz-executor.5 Not tainted 4.14.169-syzkaller #0 [ 2065.233551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2065.242917] Call Trace: [ 2065.245523] dump_stack+0x142/0x197 [ 2065.249277] dump_header+0x177/0x6cd [ 2065.253004] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2065.258250] ? ___ratelimit+0x55/0x537 [ 2065.262153] oom_kill_process.cold+0x10/0xadd [ 2065.266660] ? rcu_read_unlock_special+0x895/0xd40 [ 2065.271628] ? lock_downgrade+0x740/0x740 [ 2065.275952] out_of_memory+0x2ee/0x1180 [ 2065.280047] ? lock_acquire+0x16f/0x430 [ 2065.284171] ? oom_killer_disable+0x1d0/0x1d0 [ 2065.288678] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2065.293650] __alloc_pages_slowpath+0x2251/0x2930 [ 2065.298550] ? warn_alloc+0xf0/0xf0 [ 2065.302203] ? __might_sleep+0x93/0xb0 [ 2065.306215] __alloc_pages_nodemask+0x62c/0x7a0 [ 2065.312895] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2065.317918] ? ____cache_alloc_node+0x1be/0x1d0 [ 2065.322624] ? cache_grow_begin+0x335/0x400 [ 2065.326964] cache_grow_begin+0x80/0x400 [ 2065.331036] ? __cpuset_node_allowed+0xff/0x450 [ 2065.335801] fallback_alloc+0x1fd/0x2c0 [ 2065.339792] ____cache_alloc_node+0x1be/0x1d0 [ 2065.344430] kmem_cache_alloc+0x1f3/0x780 [ 2065.348596] ? trace_hardirqs_on+0x10/0x10 [ 2065.352851] getname_flags+0xcb/0x580 [ 2065.356673] user_path_at_empty+0x2f/0x50 [ 2065.360830] vfs_statx+0xcd/0x160 [ 2065.364392] ? vfs_statx_fd+0xa0/0xa0 [ 2065.368209] SYSC_newlstat+0x95/0x100 [ 2065.372027] ? SYSC_newstat+0x100/0x100 [ 2065.376044] ? mntput_no_expire+0xfa/0x850 [ 2065.380308] ? SyS_umount+0x173/0x380 [ 2065.384122] ? do_syscall_64+0x53/0x640 [ 2065.388143] ? SyS_newstat+0x30/0x30 [ 2065.391875] SyS_newlstat+0x1e/0x30 [ 2065.395511] do_syscall_64+0x1e8/0x640 [ 2065.399400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2065.404265] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2065.409488] RIP: 0033:0x45a755 [ 2065.412676] RSP: 002b:00007fff26f35208 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 2065.420388] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a755 [ 2065.427769] RDX: 00007fff26f35220 RSI: 00007fff26f35220 RDI: 00007fff26f352b0 [ 2065.435168] RBP: 00000000000012ab R08: 0000000000000000 R09: 000000000000000d [ 2065.442621] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fff26f36340 [ 2065.449930] R13: 0000000001f1a940 R14: 0000000000000000 R15: 00007fff26f36340 [ 2065.477646] Mem-Info: [ 2065.480156] active_anon:767011 inactive_anon:549655 isolated_anon:0 [ 2065.480156] active_file:35 inactive_file:11 isolated_file:26 [ 2065.480156] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2065.480156] slab_reclaimable:19316 slab_unreclaimable:123693 [ 2065.480156] mapped:601288 shmem:610054 pagetables:31522 bounce:0 [ 2065.480156] free:23680 free_pcp:3 free_cma:0 [ 2065.514039] Node 0 active_anon:878924kB inactive_anon:1015456kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223672kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2065.542593] Node 1 active_anon:2189120kB inactive_anon:1183164kB active_file:112kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):104kB mapped:1181480kB dirty:0kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2065.575853] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:960kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2065.607443] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2065.612580] Node 0 DMA32 free:31264kB min:36384kB low:45480kB high:54576kB active_anon:877964kB inactive_anon:1011236kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18784kB pagetables:30696kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2065.642050] lowmem_reserve[]: 0 0 0 0 0 [ 2065.646064] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2065.672009] lowmem_reserve[]: 0 0 0 0 0 [ 2065.675994] Node 1 Normal free:53148kB min:53504kB low:66880kB high:80256kB active_anon:2189160kB inactive_anon:1183164kB active_file:28kB inactive_file:260kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24128kB pagetables:95388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2065.705451] lowmem_reserve[]: 0 0 0 0 0 [ 2065.709433] Node 0 DMA: 3*4kB (MEH) 7*8kB (UH) 5*16kB (H) 5*32kB (EH) 3*64kB (MEH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10484kB [ 2065.724981] Node 0 DMA32: 1043*4kB (UME) 2157*8kB (UME) 379*16kB (UME) 21*32kB (UME) 35*64kB (UM) 7*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31300kB [ 2065.739866] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2065.750735] Node 1 Normal: 583*4kB (UME) 313*8kB (UMEH) 123*16kB (UMEH) 36*32kB (UME) 99*64kB (ME) 165*128kB (UM) 30*256kB (UM) 4*512kB (M) 2*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 53332kB [ 2065.767882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2065.776768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2065.785393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2065.794290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2065.802907] 610124 total pagecache pages [ 2065.806971] 0 pages in swap cache [ 2065.810495] Swap cache stats: add 0, delete 0, find 0/0 [ 2065.815858] Free swap = 0kB [ 2065.818866] Total swap = 0kB [ 2065.821941] 1965979 pages RAM [ 2065.825471] 0 pages HighMem/MovableOnly [ 2065.829495] 335855 pages reserved [ 2065.833148] 0 pages cma reserved [ 2065.836535] Out of memory: Kill process 9026 (syz-executor.4) score 1007 or sacrifice child [ 2065.845091] Killed process 9026 (syz-executor.4) total-vm:73116kB, anon-rss:16372kB, file-rss:34816kB, shmem-rss:0kB [ 2065.905114] oom_reaper: reaped process 9026 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2065.932542] FAT-fs (loop3): bogus number of reserved sectors [ 2065.938528] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:20 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:09:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x17) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x5, 0x0, &(0x7f00000001c0)) [ 2066.327052] FAT-fs (loop3): bogus number of reserved sectors [ 2066.353722] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:20 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:09:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:20 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x5, 0x0, &(0x7f00000001c0)) 21:09:20 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) [ 2066.741402] FAT-fs (loop3): bogus number of reserved sectors [ 2066.768557] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:21 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:09:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) [ 2067.013579] FAT-fs (loop3): bogus number of reserved sectors [ 2067.019942] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x5, 0x0, &(0x7f00000001c0)) 21:09:21 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:09:23 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r4, 0x0) 21:09:23 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:09:23 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:09:23 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) 21:09:23 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x5, 0x0, &(0x7f00000001c0)) 21:09:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:23 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x5, 0x0, &(0x7f00000001c0)) 21:09:23 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) [ 2069.402991] FAT-fs (loop3): bogus number of reserved sectors [ 2069.415731] FAT-fs (loop3): Can't find a valid FAT filesystem 21:09:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:24 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:09:24 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:09:24 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:09:24 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x5, 0x0, &(0x7f00000001c0)) 21:09:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) [ 2071.454928] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 21:09:25 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) [ 2071.504773] blkid cpuset=/ mems_allowed=0-1 [ 2071.538454] CPU: 1 PID: 10983 Comm: blkid Not tainted 4.14.169-syzkaller #0 [ 2071.545597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2071.555132] Call Trace: [ 2071.557819] dump_stack+0x142/0x197 [ 2071.561461] dump_header+0x177/0x6cd [ 2071.565223] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2071.570681] ? ___ratelimit+0x55/0x537 [ 2071.574615] oom_kill_process.cold+0x10/0xadd [ 2071.579153] ? rcu_read_unlock_special+0x895/0xd40 [ 2071.584109] ? lock_downgrade+0x740/0x740 [ 2071.588273] out_of_memory+0x2ee/0x1180 [ 2071.592966] ? lock_acquire+0x16f/0x430 [ 2071.597082] ? oom_killer_disable+0x1d0/0x1d0 [ 2071.609755] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2071.614710] __alloc_pages_slowpath+0x2251/0x2930 [ 2071.619606] ? warn_alloc+0xf0/0xf0 [ 2071.623274] ? __might_sleep+0x93/0xb0 [ 2071.627189] __alloc_pages_nodemask+0x62c/0x7a0 [ 2071.631874] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2071.636907] ? cache_grow_begin+0x335/0x400 [ 2071.641238] cache_grow_begin+0x80/0x400 [ 2071.645307] ? __cpuset_node_allowed+0xff/0x450 [ 2071.649989] fallback_alloc+0x1fd/0x2c0 [ 2071.653974] ____cache_alloc_node+0x1be/0x1d0 [ 2071.658479] kmem_cache_alloc+0x1f3/0x780 [ 2071.662646] ima_d_path+0x52/0x1de [ 2071.666196] process_measurement+0x96a/0xb80 [ 2071.670625] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 2071.675827] ? dput.part.0+0x170/0x750 [ 2071.679735] ? dquot_file_open+0x60/0xa0 [ 2071.683809] ? ext4_file_open+0x2da/0x850 [ 2071.687963] ? ext4_release_file+0x2e0/0x2e0 [ 2071.692377] ? inode_has_perm.isra.0+0x1e0/0x1e0 [ 2071.697143] ? lock_downgrade+0x6dc/0x740 [ 2071.701299] ? do_raw_spin_unlock+0x174/0x260 [ 2071.705805] ? security_file_open+0x89/0x190 [ 2071.710218] ? file_ra_state_init+0xc9/0x1e0 [ 2071.714810] ? do_dentry_open+0x452/0xeb0 [ 2071.718971] ? ext4_release_file+0x2e0/0x2e0 [ 2071.723395] ima_file_check+0x30/0x40 [ 2071.727197] path_openat+0x1634/0x3db0 [ 2071.731076] ? find_held_lock+0x35/0x130 [ 2071.735129] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 2071.739784] ? __alloc_fd+0x1d4/0x4a0 [ 2071.743658] do_filp_open+0x18e/0x250 [ 2071.747444] ? may_open_dev+0xe0/0xe0 [ 2071.751236] ? _raw_spin_unlock+0x2d/0x50 [ 2071.755370] ? __alloc_fd+0x1d4/0x4a0 [ 2071.759159] do_sys_open+0x2c5/0x430 [ 2071.762856] ? filp_open+0x70/0x70 [ 2071.766376] ? SyS_access+0x377/0x6b0 [ 2071.770293] SyS_open+0x2d/0x40 [ 2071.773573] ? do_sys_open+0x430/0x430 [ 2071.777467] do_syscall_64+0x1e8/0x640 [ 2071.781354] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2071.786205] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2071.791398] RIP: 0033:0x7ff51548c1a7 [ 2071.795118] RSP: 002b:00007ffddb9a8a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2071.802818] RAX: ffffffffffffffda RBX: 00007ff5156971c8 RCX: 00007ff51548c1a7 [ 2071.810108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ff5156920ee [ 2071.817393] RBP: 00007ffddb9a8b00 R08: 00007ffddb9a8eff R09: 0000000000000000 [ 2071.824678] R10: 00007ff5156920ee R11: 0000000000000246 R12: 0000000000000008 [ 2071.831963] R13: 00007ff515696040 R14: 0000000000000000 R15: 00007ffddb9a8eff [ 2072.289714] Mem-Info: [ 2072.293162] active_anon:764218 inactive_anon:549651 isolated_anon:0 [ 2072.293162] active_file:657 inactive_file:758 isolated_file:25 [ 2072.293162] unevictable:0 dirty:12 writeback:0 unstable:0 [ 2072.293162] slab_reclaimable:19136 slab_unreclaimable:124098 [ 2072.293162] mapped:602561 shmem:610054 pagetables:31739 bounce:0 [ 2072.293162] free:24451 free_pcp:87 free_cma:0 [ 2072.328433] Node 0 active_anon:882876kB inactive_anon:1015456kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2072.357116] Node 1 active_anon:2173796kB inactive_anon:1183148kB active_file:2480kB inactive_file:3620kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1186520kB dirty:48kB writeback:0kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 21:09:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:26 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) tkill(r0, 0x16) [ 2072.500111] Node 0 DMA free:10424kB min:216kB low:268kB high:320kB active_anon:1020kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2072.599839] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2072.621960] Node 0 DMA32 free:27516kB min:36384kB low:45480kB high:54576kB active_anon:881856kB inactive_anon:1011236kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18880kB pagetables:30696kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 21:09:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x5, 0x0, 0x0) [ 2072.830100] lowmem_reserve[]: 0 0 0 0 0 [ 2072.834191] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2072.956305] lowmem_reserve[]: 0 0 0 0 0 [ 2072.960596] Node 1 Normal free:57992kB min:53504kB low:66880kB high:80256kB active_anon:2177020kB inactive_anon:1183148kB active_file:2900kB inactive_file:2040kB unevictable:0kB writepending:48kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24256kB pagetables:96252kB bounce:0kB free_pcp:168kB local_pcp:140kB free_cma:0kB [ 2073.035445] lowmem_reserve[]: 0 0 0 0 0 [ 2073.039620] Node 0 DMA: 2*4kB (EH) 8*8kB (UMH) 5*16kB (H) 5*32kB (EH) 2*64kB (EH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 2073.106981] Node 0 DMA32: 949*4kB (UME) 2137*8kB (UME) 350*16kB (UME) 22*32kB (UME) 1*64kB (U) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27516kB [ 2073.197235] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2073.254699] Node 1 Normal: 466*4kB (UME) 350*8kB (UE) 115*16kB (UEH) 41*32kB (UMEH) 183*64kB (UMEH) 161*128kB (MH) 31*256kB (UMH) 5*512kB (UM) 3*1024kB (MH) 0*2048kB 0*4096kB = 53704kB [ 2073.301914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2073.321295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2073.344214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2073.378610] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2073.407025] 610841 total pagecache pages [ 2073.428203] 0 pages in swap cache [ 2073.440288] Swap cache stats: add 0, delete 0, find 0/0 [ 2073.466749] Free swap = 0kB [ 2073.473017] Total swap = 0kB [ 2073.479623] 1965979 pages RAM [ 2073.487139] 0 pages HighMem/MovableOnly [ 2073.508533] 335855 pages reserved [ 2073.528864] 0 pages cma reserved [ 2073.537863] Out of memory: Kill process 10295 (syz-executor.0) score 1007 or sacrifice child [ 2073.585550] Killed process 10295 (syz-executor.0) total-vm:73116kB, anon-rss:16560kB, file-rss:34628kB, shmem-rss:0kB [ 2074.323061] oom_reaper: reaped process 10986 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2074.405268] kthreadd invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2074.434427] kthreadd cpuset=/ mems_allowed=0-1 [ 2074.452447] CPU: 0 PID: 2 Comm: kthreadd Not tainted 4.14.169-syzkaller #0 [ 2074.459622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2074.471849] Call Trace: [ 2074.474565] dump_stack+0x142/0x197 [ 2074.478207] dump_header+0x177/0x6cd [ 2074.482109] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2074.487250] ? ___ratelimit+0x55/0x537 [ 2074.491153] oom_kill_process.cold+0x10/0xadd [ 2074.495653] ? rcu_read_unlock_special+0x639/0xd40 [ 2074.500584] ? lock_downgrade+0x740/0x740 [ 2074.504730] out_of_memory+0x2ee/0x1180 [ 2074.508711] ? lock_acquire+0x16f/0x430 [ 2074.512700] ? oom_killer_disable+0x1d0/0x1d0 [ 2074.517204] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2074.522156] __alloc_pages_slowpath+0x2251/0x2930 [ 2074.527029] ? warn_alloc+0xf0/0xf0 [ 2074.530655] ? __might_sleep+0x93/0xb0 [ 2074.534552] __alloc_pages_nodemask+0x62c/0x7a0 [ 2074.539220] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2074.544231] ? rcu_read_lock_sched_held+0x110/0x130 [ 2074.549265] copy_process.part.0+0x26a/0x6a70 [ 2074.553760] ? trace_hardirqs_on+0x10/0x10 [ 2074.558002] ? save_trace+0x290/0x290 [ 2074.562523] ? __lock_acquire+0x5f7/0x4620 [ 2074.566751] ? finish_task_switch+0x178/0x650 [ 2074.571343] ? find_held_lock+0x35/0x130 [ 2074.575413] ? kthread_create_on_node+0xd0/0xd0 [ 2074.580076] ? __cleanup_sighand+0x50/0x50 [ 2074.584320] ? trace_hardirqs_on+0x10/0x10 [ 2074.588581] _do_fork+0x19e/0xce0 [ 2074.592047] ? kthreadd+0x49f/0x700 [ 2074.595681] ? kthread_create_on_node+0xd0/0xd0 [ 2074.600345] ? fork_idle+0x280/0x280 [ 2074.604059] ? kthreadd+0x49f/0x700 [ 2074.607687] ? lock_downgrade+0x740/0x740 [ 2074.611839] ? kthread_create_on_node+0xd0/0xd0 [ 2074.616504] kernel_thread+0x34/0x40 [ 2074.620206] kthreadd+0x4f7/0x700 [ 2074.623649] ? kthread_create_on_cpu+0x1c0/0x1c0 [ 2074.628392] ? kthread_create_on_cpu+0x1c0/0x1c0 [ 2074.633138] ret_from_fork+0x24/0x30 [ 2074.824967] Mem-Info: [ 2074.828688] active_anon:762624 inactive_anon:549651 isolated_anon:0 [ 2074.828688] active_file:147 inactive_file:239 isolated_file:32 [ 2074.828688] unevictable:0 dirty:19 writeback:27 unstable:0 [ 2074.828688] slab_reclaimable:19129 slab_unreclaimable:124131 [ 2074.828688] mapped:601541 shmem:610054 pagetables:31692 bounce:0 [ 2074.828688] free:27354 free_pcp:35 free_cma:0 [ 2074.875808] Node 0 active_anon:882896kB inactive_anon:1015456kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1223624kB dirty:0kB writeback:0kB shmem:1148340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2074.934527] Node 1 active_anon:2167600kB inactive_anon:1183148kB active_file:1236kB inactive_file:6168kB unevictable:0kB isolated(anon):0kB isolated(file):756kB mapped:1186940kB dirty:76kB writeback:8kB shmem:1291876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2075.055780] Node 0 DMA free:10424kB min:216kB low:268kB high:320kB active_anon:1020kB inactive_anon:4220kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2075.152485] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2075.174239] Node 0 DMA32 free:27464kB min:36384kB low:45480kB high:54576kB active_anon:881876kB inactive_anon:1011236kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:18880kB pagetables:30696kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2075.210536] lowmem_reserve[]: 0 0 0 0 0 [ 2075.214813] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2075.241600] lowmem_reserve[]: 0 0 0 0 0 [ 2075.245743] Node 1 Normal free:71892kB min:53504kB low:66880kB high:80256kB active_anon:2167604kB inactive_anon:1183148kB active_file:552kB inactive_file:128kB unevictable:0kB writepending:60kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:24192kB pagetables:96068kB bounce:0kB free_pcp:236kB local_pcp:12kB free_cma:0kB [ 2075.275958] lowmem_reserve[]: 0 0 0 0 0 [ 2075.280131] Node 0 DMA: 2*4kB (EH) 8*8kB (UMH) 5*16kB (H) 5*32kB (EH) 2*64kB (EH) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (EH) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 2075.297224] Node 0 DMA32: 944*4kB (UME) 2143*8kB (UME) 349*16kB (UME) 22*32kB (UME) 2*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27464kB [ 2075.325953] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2075.392208] Node 1 Normal: 1477*4kB (UMEH) 972*8kB (UMEH) 327*16kB (UMEH) 126*32kB (UMEH) 184*64kB (UME) 163*128kB (M) 31*256kB (UM) 5*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 69156kB [ 2075.455523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2075.484844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2075.505079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2075.526937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2075.547180] 610565 total pagecache pages [ 2075.551377] 0 pages in swap cache [ 2075.554837] Swap cache stats: add 0, delete 0, find 0/0 [ 2075.573608] Free swap = 0kB [ 2075.576665] Total swap = 0kB [ 2075.579706] 1965979 pages RAM [ 2075.604859] 0 pages HighMem/MovableOnly [ 2075.610441] 335855 pages reserved [ 2075.614682] 0 pages cma reserved [ 2075.618631] Out of memory: Kill process 9095 (syz-executor.0) score 1007 or sacrifice child [ 2075.642314] Killed process 9095 (syz-executor.0) total-vm:73116kB, anon-rss:16436kB, file-rss:34728kB, shmem-rss:0kB 21:09:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x5, 0x0, 0x0) 21:09:29 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r5, 0x0) 21:09:29 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:09:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]}) 21:09:30 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 21:09:30 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x27f, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r6, 0x0) 21:09:30 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00efffba16a0aa1c0009b3ebea966cf0fad90f15a36a1500"/76, 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x1b3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x437}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000040)=""/14, 0xe}], 0x6}}], 0x4000000000004da, 0x42, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2L\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdda\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xe6\xdc\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xca\xb4G3H\t\xe9W\xfc$\xf9\xfb\xafv\xa3x\x81\xaf)B9\xed _\x83\xac\t\xc0\xc0p\xd4\x83\x00\x00\x00\x00\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstatfs(r3, 0x0) [ 2076.130694] kasan: CONFIG_KASAN_INLINE enabled [ 2076.135718] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2076.178433] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2076.184697] Modules linked in: [ 2076.186160] FAT-fs (loop3): bogus number of reserved sectors [ 2076.187897] CPU: 0 PID: 11031 Comm: blkid Not tainted 4.14.169-syzkaller #0 [ 2076.187903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2076.187907] task: ffff88809f43c580 task.stack: ffff888173e08000 [ 2076.187923] RIP: 0010:path_openat+0x20b/0x3db0 [ 2076.194130] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2076.200947] RSP: 0018:ffff888173e0fb28 EFLAGS: 00010247 [ 2076.200961] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0001020304050608 [ 2076.200965] RDX: 0000000000000000 RSI: 1ffff1102e7c1f56 RDI: 0000000000000004 [ 2076.200969] RBP: ffff888173e0fc80 R08: ffff88809f43c580 R09: 0000000000000001 [ 2076.200973] R10: 0000000000000000 R11: 0000000000000003 R12: ffff888173e0fcc0 [ 2076.200977] R13: ffff888173e0fcc0 R14: ffff888099be3760 R15: 0000000000000000 [ 2076.200988] FS: 0000000000000000(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000 [ 2076.200992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2076.200996] CR2: 0000000000738008 CR3: 00000001fc098000 CR4: 00000000001426f0 [ 2076.201002] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2076.201010] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2076.201013] Call Trace: [ 2076.201039] ? find_held_lock+0x35/0x130 [ 2076.313234] ? save_trace+0x290/0x290 [ 2076.317047] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 2076.321733] ? save_trace+0x290/0x290 [ 2076.325545] ? __alloc_fd+0x1d4/0x4a0 [ 2076.329356] do_filp_open+0x18e/0x250 [ 2076.333167] ? may_open_dev+0xe0/0xe0 [ 2076.336982] ? do_raw_spin_unlock+0x174/0x260 [ 2076.341617] ? _raw_spin_unlock+0x2d/0x50 [ 2076.345917] ? __alloc_fd+0x1d4/0x4a0 [ 2076.349742] do_sys_open+0x2c5/0x430 [ 2076.353475] ? filp_open+0x70/0x70 [ 2076.357048] SyS_open+0x2d/0x40 [ 2076.360458] ? do_sys_open+0x430/0x430 [ 2076.364356] do_syscall_64+0x1e8/0x640 [ 2076.368374] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2076.373229] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2076.378528] RIP: 0033:0x7efe1c8e41a7 [ 2076.382241] RSP: 002b:00007ffd07509a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2076.390057] RAX: ffffffffffffffda RBX: 0000000000400f31 RCX: 00007efe1c8e41a7 [ 2076.397331] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007efe1c8e8282 [ 2076.405564] RBP: 0000000000000001 R08: 00007efe1caef570 R09: 0000000000000000 [ 2076.413002] R10: ffffffffffffffb0 R11: 0000000000000246 R12: 00007efe1caef090 [ 2076.420284] R13: 00007efe1caee040 R14: 0000000000000000 R15: 00007efe1caef570 [ 2076.427566] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 03 30 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5e 58 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 2076.447170] RIP: path_openat+0x20b/0x3db0 RSP: ffff888173e0fb28 [ 2076.466979] ---[ end trace 76eb031b0341ef76 ]--- [ 2076.476691] Kernel panic - not syncing: Fatal exception [ 2076.482955] Kernel Offset: disabled [ 2076.486586] Rebooting in 86400 seconds..