4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}], {}, {0x20, 0x4}}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="28000000ce93010400"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2dadb200c417e8841b5bf6253db45be705477e3692771bce4309cbfda44517170eb4bedb22d693b31c76a8", @ANYBLOB="022000000022fce38db7c1bc", @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbf9, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044804}, 0x4008841) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.//ile0\x00', &(0x7f0000000500), 0x6000) [ 1919.522312] syz-executor.2 cpuset=/ mems_allowed=0-1 12:18:41 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/905], 0x0) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x2) 12:18:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="010028bd7000fe7d"], 0x2}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1919.522344] CPU: 1 PID: 10701 Comm: syz-executor.2 Not tainted 4.14.176-syzkaller #0 [ 1919.522353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1919.522358] Call Trace: 12:18:41 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaff86dd601bfc97004d8880fe800001000000000000000008000600ff02000000000000000000000000000101004e2000459078e29607149378d33e1db1c7b22ac77aa3f7fac33b042bd368236862531934ecb1c373f87429e50b3288d09ddf137e81aea56d86884b08d1b9baa36a16513c979a6d36b98805aa2f878939eff92c28f0123c4516dac468ab7d2a55b03592a1b73e3d551df3387bb310cf05f5085b9d1db3f58e7aa5ede91f097534c377a5fcc96c93e186803d17a074403011741966f688600b3e72a2dfe202754fc5872baea9c91b603ff0747cb29b7e267bf8020100385b1503a87b7402aaa98172db56a77b24aa29d6c4d443179bde2fe7440974db7d6a8e7a2055a1e3a4077fccbe3fa4156ae69c0eeec036acf9c86da2adea37b8d03c1b3be3ad58fafaa4f64cc24c45fd55f35aae71c4d01043744843eb184f14953c68d5c9c287d54217f39ee7401fdf5ef5b34bfa1c02fea1365fd7c3b149485e058cecc094907916756d5a001518fae66f6a002a4ebe2337f2ef5d313c67b25ad1566f7c514174f8e4addc365d5206918952ca91a93320d5f392a8ce0b470492e56fc8f9f590560064f6c1f64b800f8084fcab85aefd243b393c68c3bac86ea84df99570f67f72db338ad00e187e836f6f0e791c9b0923b9591bfc74a1595457db39d90e3940074cdb70c2292363d1cabddcf38476bb4aafe86358212edd0f4cac93c44a30cb104a65da438790f41ef8b5cd563b38109d483efd0c48bf21daea6b3eeaf82b59940f475d5d455044ace9cab283e86378b552d6abf7a9f636776158000000000000000000000000000000402a418d31a0cdfb29d05981694ca43cb44290544249f6e21d282a174d9f8784fea9c43e5587cab728b45bdeb57f6069033c9486d1ba6e63721607e26d2cc69b8b1234c37c362e3b723dcc283d859cd12957ae84ae777058e15c4100000000000000007f6565a344df7006d34254ff1b09f34b1ebb7713aca44c983f6ce5f160790c4300000000000000000000001cf0f6ff438d3d909ddb8e084819d21a7772cfed8261f0582e8a1eacc5aa37293f1fa204a847d432a5bb9710af991e8bcf5a15b92c65befcb2687fc7dd236dd950e9b6c17814883085f0d5cecf8e9b835fc96854bd83756e850c3b823372985846a9f54adb562f200d7ee67e7a3d368bf14c12dec6113eca1cbb12456f6ea5f99b25af8000"/905], 0x0) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x2) [ 1919.522379] dump_stack+0x13e/0x194 [ 1919.522400] warn_alloc.cold+0x96/0x1af [ 1919.522416] ? zone_watermark_ok_safe+0x280/0x280 12:18:41 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/905], 0x0) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x2) [ 1919.522444] ? wait_for_completion+0x390/0x390 [ 1919.522465] __alloc_pages_slowpath+0x2114/0x26c0 [ 1919.522501] ? warn_alloc+0xf0/0xf0 [ 1919.522515] ? find_held_lock+0x2d/0x110 [ 1919.522529] ? fs_reclaim_acquire+0x10/0x10 [ 1919.522563] __alloc_pages_nodemask+0x5d3/0x700 [ 1919.522579] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1919.522591] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1919.522606] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1919.522633] alloc_pages_current+0xe7/0x1e0 [ 1919.522651] kvm_mmu_create+0xd1/0x1c0 [ 1919.522668] kvm_arch_vcpu_init+0x28b/0x8b0 [ 1919.522683] ? alloc_pages_current+0xef/0x1e0 [ 1919.522701] kvm_vcpu_init+0x26d/0x360 [ 1919.522719] vmx_create_vcpu+0xf3/0x2900 [ 1919.522746] ? __mutex_unlock_slowpath+0x75/0x780 [ 1919.522763] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 1919.522781] ? handle_rdmsr+0x6b0/0x6b0 [ 1919.522808] kvm_vm_ioctl+0x49c/0x1430 [ 1919.522826] ? __lock_acquire+0x5f7/0x4620 [ 1919.522839] ? kvm_vcpu_release+0xa0/0xa0 [ 1919.522853] ? check_preemption_disabled+0x35/0x240 [ 1919.522871] ? perf_trace_lock+0x109/0x4b0 [ 1919.522888] ? check_preemption_disabled+0x35/0x240 [ 1919.522907] ? perf_trace_lock+0x109/0x4b0 [ 1919.522925] ? save_trace+0x290/0x290 [ 1919.522939] ? SOFTIRQ_verbose+0x10/0x10 [ 1919.522962] ? kvm_vcpu_release+0xa0/0xa0 [ 1919.522982] do_vfs_ioctl+0x75a/0xfe0 [ 1919.523000] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1919.523024] ? ioctl_preallocate+0x1a0/0x1a0 [ 1919.523055] ? security_file_ioctl+0x76/0xb0 [ 1919.523067] ? security_file_ioctl+0x83/0xb0 [ 1919.523083] SyS_ioctl+0x7f/0xb0 [ 1919.523095] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1919.523112] do_syscall_64+0x1d5/0x640 [ 1919.523132] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1919.523142] RIP: 0033:0x45c829 [ 1919.523149] RSP: 002b:00007f5b99c4bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1919.523162] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 1919.523170] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 1919.523177] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1919.523194] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1919.523202] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f5b99c4c6d4 [ 1919.722772] IPVS: ftp: loaded support on port[0] = 21 [ 1919.850803] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1919.850837] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1919.850870] CPU: 0 PID: 10725 Comm: syz-executor.2 Not tainted 4.14.176-syzkaller #0 [ 1919.850878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1919.850883] Call Trace: [ 1919.850911] dump_stack+0x13e/0x194 [ 1919.850932] warn_alloc.cold+0x96/0x1af [ 1919.850946] ? zone_watermark_ok_safe+0x280/0x280 [ 1919.850974] ? wait_for_completion+0x390/0x390 [ 1919.850995] __alloc_pages_slowpath+0x2114/0x26c0 [ 1919.851028] ? warn_alloc+0xf0/0xf0 [ 1919.851042] ? find_held_lock+0x2d/0x110 [ 1919.851058] ? fs_reclaim_acquire+0x10/0x10 [ 1919.851085] __alloc_pages_nodemask+0x5d3/0x700 [ 1919.851101] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1919.851112] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1919.851125] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1919.851151] alloc_pages_current+0xe7/0x1e0 [ 1919.851169] kvm_mmu_create+0xd1/0x1c0 [ 1919.851185] kvm_arch_vcpu_init+0x28b/0x8b0 [ 1919.851196] ? alloc_pages_current+0xef/0x1e0 [ 1919.851213] kvm_vcpu_init+0x26d/0x360 [ 1919.851229] vmx_create_vcpu+0xf3/0x2900 [ 1919.851248] ? __mutex_unlock_slowpath+0x75/0x780 [ 1919.851261] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 1919.851284] ? handle_rdmsr+0x6b0/0x6b0 [ 1919.851307] kvm_vm_ioctl+0x49c/0x1430 [ 1919.851324] ? __lock_acquire+0x5f7/0x4620 12:18:42 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x840, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0xa, 0x22b180) socket$inet6(0xa, 0x3, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @private1, 0x9}, 0x1c) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000002c0), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 12:18:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}], {}, {0x20, 0x4}}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="28000000ce93010400"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2dadb200c417e8841b5bf6253db45be705477e3692771bce4309cbfda44517170eb4bedb22d693b31c76a8", @ANYBLOB="022000000022fce38db7c1bc", @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbf9, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044804}, 0x4008841) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.//ile0\x00', &(0x7f0000000500), 0x6000) 12:18:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}], {}, {0x20, 0x4}}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="28000000ce93010400"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2dadb200c417e8841b5bf6253db45be705477e3692771bce4309cbfda44517170eb4bedb22d693b31c76a8", @ANYBLOB="022000000022fce38db7c1bc", @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbf9, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044804}, 0x4008841) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.//ile0\x00', &(0x7f0000000500), 0x6000) [ 1919.851338] ? kvm_vcpu_release+0xa0/0xa0 [ 1919.851351] ? check_preemption_disabled+0x35/0x240 [ 1919.851367] ? perf_trace_lock+0x109/0x4b0 [ 1919.851383] ? check_preemption_disabled+0x35/0x240 [ 1919.851399] ? perf_trace_lock+0x109/0x4b0 [ 1919.851412] ? save_trace+0x290/0x290 [ 1919.851426] ? SOFTIRQ_verbose+0x10/0x10 [ 1919.851444] ? kvm_vcpu_release+0xa0/0xa0 [ 1919.851459] do_vfs_ioctl+0x75a/0xfe0 [ 1919.851475] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1919.851490] ? ioctl_preallocate+0x1a0/0x1a0 [ 1919.851515] ? security_file_ioctl+0x76/0xb0 [ 1919.851526] ? security_file_ioctl+0x83/0xb0 [ 1919.851541] SyS_ioctl+0x7f/0xb0 [ 1919.851551] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1919.851569] do_syscall_64+0x1d5/0x640 [ 1919.851590] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1919.851601] RIP: 0033:0x45c829 [ 1919.851608] RSP: 002b:00007f5b99c4bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1919.851622] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 1919.851629] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 1919.851637] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1919.851644] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1919.851651] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f5b99c4c6d4 [ 1919.872468] warn_alloc_show_mem: 1 callbacks suppressed [ 1919.872472] Mem-Info: [ 1919.872504] active_anon:564485 inactive_anon:181584 isolated_anon:0 [ 1919.872504] active_file:31450 inactive_file:38142 isolated_file:0 [ 1919.872504] unevictable:7713 dirty:247 writeback:0 unstable:0 [ 1919.872504] slab_reclaimable:17068 slab_unreclaimable:135237 [ 1919.872504] mapped:66340 shmem:12028 pagetables:19869 bounce:0 [ 1919.872504] free:519726 free_pcp:349 free_cma:0 [ 1919.872525] Node 0 active_anon:1421368kB inactive_anon:381852kB active_file:108kB inactive_file:204kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230544kB dirty:40kB writeback:0kB shmem:37720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1919.872547] Node 1 active_anon:836572kB inactive_anon:344484kB active_file:125692kB inactive_file:152364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:948kB writeback:0kB shmem:10392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1919.872553] Node 0 DMA free:10400kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1919.872577] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1919.872605] Node 0 DMA32 free:33508kB min:36272kB low:45340kB high:54408kB active_anon:1421368kB inactive_anon:380544kB active_file:108kB inactive_file:204kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16576kB pagetables:55444kB bounce:0kB free_pcp:756kB local_pcp:712kB free_cma:0kB [ 1919.872642] lowmem_reserve[]: 0 0 0 0 0 [ 1919.872671] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1919.872694] lowmem_reserve[]: 0 0 0 0 0 [ 1919.872720] Node 1 Normal free:2034996kB min:53612kB low:67012kB high:80412kB active_anon:836572kB inactive_anon:344484kB active_file:125692kB inactive_file:152364kB unevictable:0kB writepending:948kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:14720kB pagetables:24032kB bounce:0kB free_pcp:640kB local_pcp:472kB free_cma:0kB [ 1919.872747] lowmem_reserve[]: 0 0 0 0 0 [ 1919.872775] Node 0 DMA: 6*4kB (UMEH) 5*8kB (UE) 6*16kB (UEH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10400kB [ 1919.872882] Node 0 DMA32: 309*4kB (UMEH) 540*8kB (UMEH) 1013*16kB (UMH) 178*32kB (UME) 18*64kB (UMH) 1*128kB (H) 7*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 33604kB [ 1919.872984] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1919.873048] Node 1 Normal: 25*4kB (ME) 43*8kB (UM) 528*16kB (UME) 569*32kB (UME) 237*64kB (UME) 24*128kB (UME) 82*256kB (UME) 77*512kB (UME) 22*1024kB (UME) 7*2048kB (UM) 462*4096kB (UM) = 2034972kB [ 1919.873184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1919.873192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1919.873201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1919.873209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1919.873215] 79619 total pagecache pages [ 1919.873227] 0 pages in swap cache [ 1919.873234] Swap cache stats: add 0, delete 0, find 0/0 [ 1919.873239] Free swap = 0kB [ 1919.873244] Total swap = 0kB [ 1919.873251] 1965979 pages RAM [ 1919.873258] 0 pages HighMem/MovableOnly [ 1919.873263] 339050 pages reserved [ 1919.873268] 0 pages cma reserved 12:18:43 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000240)=""/57) syz_open_procfs(0x0, &(0x7f0000000040)='net/llc/core\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4bfb, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) 12:18:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}], {}, {0x20, 0x4}}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="28000000ce93010400"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2dadb200c417e8841b5bf6253db45be705477e3692771bce4309cbfda44517170eb4bedb22d693b31c76a8", @ANYBLOB="022000000022fce38db7c1bc", @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbf9, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044804}, 0x4008841) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.//ile0\x00', &(0x7f0000000500), 0x6000) 12:18:43 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x30009, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x7f, @dev, 0xa41e}], 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0xbd1) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x7}, 0x16, 0x3) 12:18:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}], {}, {0x20, 0x4}}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="28000000ce93010400"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2dadb200c417e8841b5bf6253db45be705477e3692771bce4309cbfda44517170eb4bedb22d693b31c76a8", @ANYBLOB="022000000022fce38db7c1bc", @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbf9, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044804}, 0x4008841) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.//ile0\x00', &(0x7f0000000500), 0x6000) 12:18:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}], {}, {0x20, 0x4}}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="28000000ce93010400"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2dadb200c417e8841b5bf6253db45be705477e3692771bce4309cbfda44517170eb4bedb22d693b31c76a8", @ANYBLOB="022000000022fce38db7c1bc", @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbf9, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044804}, 0x4008841) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.//ile0\x00', &(0x7f0000000500), 0x6000) 12:18:43 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x840, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0xa, 0x22b180) socket$inet6(0xa, 0x3, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @private1, 0x9}, 0x1c) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000002c0), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 12:18:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}], {}, {0x20, 0x4}}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="28000000ce93010400"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2dadb200c417e8841b5bf6253db45be705477e3692771bce4309cbfda44517170eb4bedb22d693b31c76a8", @ANYBLOB="022000000022fce38db7c1bc", @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbf9, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044804}, 0x4008841) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.//ile0\x00', &(0x7f0000000500), 0x6000) 12:18:44 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x840, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0xa, 0x22b180) socket$inet6(0xa, 0x3, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @private1, 0x9}, 0x1c) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000002c0), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 12:18:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}], {}, {0x20, 0x4}}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="28000000ce93010400"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2dadb200c417e8841b5bf6253db45be705477e3692771bce4309cbfda44517170eb4bedb22d693b31c76a8", @ANYBLOB="022000000022fce38db7c1bc", @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbf9, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044804}, 0x4008841) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.//ile0\x00', &(0x7f0000000500), 0x6000) 12:18:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}], {}, {0x20, 0x4}}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="28000000ce93010400"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2dadb200c417e8841b5bf6253db45be705477e3692771bce4309cbfda44517170eb4bedb22d693b31c76a8", @ANYBLOB="022000000022fce38db7c1bc", @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbf9, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044804}, 0x4008841) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.//ile0\x00', &(0x7f0000000500), 0x6000) 12:18:44 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000240)=""/57) syz_open_procfs(0x0, &(0x7f0000000040)='net/llc/core\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4bfb, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) 12:18:44 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x10001) 12:18:44 executing program 3: mlock2(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x0) mlock(&(0x7f0000366000/0x3000)=nil, 0x3000) 12:18:45 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) 12:18:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}], {}, {0x20, 0x4}}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="28000000ce93010400"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2dadb200c417e8841b5bf6253db45be705477e3692771bce4309cbfda44517170eb4bedb22d693b31c76a8", @ANYBLOB="022000000022fce38db7c1bc", @ANYRES32, @ANYBLOB], 0x4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbf9, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044804}, 0x4008841) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.//ile0\x00', &(0x7f0000000500), 0x6000) 12:18:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x54}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040)}, 0x48) 12:18:45 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) 12:18:45 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) 12:18:45 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt(r0, 0x0, 0x6, 0x0, &(0x7f00000000c0)) 12:18:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:18:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) getpeername(r0, 0x0, &(0x7f00000002c0)) 12:18:45 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) 12:18:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = dup3(r1, r0, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, 0x0, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000280)="e1567404dcd52b74156039381881dc5227e5b158c27475f010093e52a9e705fc15b4b45da559b591276576bc91c71be5423a3a5edaedb109938b414107ddaeec919bb728990eb680cefa2dec25063379cfdb86c6368f184c4018880ea2b9be3848", 0x61) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 12:18:45 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x60) close(r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) [ 1924.020561] ip_tables: iptables: counters copy to user failed while replacing table 12:18:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents(r0, &(0x7f0000000040)=""/95, 0x5f) exit(0x0) getdents64(r0, 0x0, 0x0) 12:18:46 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x60) close(r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) 12:18:46 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x60) close(r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) 12:18:46 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x60) close(r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) 12:18:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = dup3(r1, r0, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, 0x0, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000280)="e1567404dcd52b74156039381881dc5227e5b158c27475f010093e52a9e705fc15b4b45da559b591276576bc91c71be5423a3a5edaedb109938b414107ddaeec919bb728990eb680cefa2dec25063379cfdb86c6368f184c4018880ea2b9be3848", 0x61) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 12:18:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:18:46 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x60) close(r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) [ 1924.791598] ip_tables: iptables: counters copy to user failed while replacing table 12:18:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:18:46 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x60) close(r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) 12:18:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 1924.936027] kauditd_printk_skb: 29 callbacks suppressed [ 1924.936037] audit: type=1804 audit(1587471526.641:4982): pid=10861 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2397/file0" dev="sda1" ino=15934 res=1 12:18:46 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1}, @TCF_EM_CMP={0x18}]}]}]}}]}, 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:18:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents(r0, &(0x7f0000000040)=""/95, 0x5f) exit(0x0) getdents64(r0, 0x0, 0x0) 12:18:46 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x60) close(r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) [ 1925.133978] ip_tables: iptables: counters copy to user failed while replacing table [ 1925.200082] ip_tables: iptables: counters copy to user failed while replacing table 12:18:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000070c0)=ANY=[@ANYPTR, @ANYPTR, @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB="838dc3bcb5516d4593d0473bfb5c1c6b62b3276f21ea83ae0e4d6db3fa06669dd1476fc1943cca9dca93b9c2e2fbe96769f85dc930788eb6be14a451accddd0c15c8a12bc635c902edafeec9deaebef17e9e6052d1ab522f4191091105482288ba054442b513d0463b795a1712a20feaed2a99faf4bee5f366ce845be28e30a799ee664220a91bd6501f5daf22cac68f09cb8578db5588b83f0705b350", @ANYRESOCT], 0x0, 0xec}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = dup3(r1, r0, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, 0x0, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000280)="e1567404dcd52b74156039381881dc5227e5b158c27475f010093e52a9e705fc15b4b45da559b591276576bc91c71be5423a3a5edaedb109938b414107ddaeec919bb728990eb680cefa2dec25063379cfdb86c6368f184c4018880ea2b9be3848", 0x61) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 12:18:47 executing program 3: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000240)) mlockall(0x1) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0)='gtp\x00') ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) 12:18:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:18:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = dup3(r1, r0, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, 0x0, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000280)="e1567404dcd52b74156039381881dc5227e5b158c27475f010093e52a9e705fc15b4b45da559b591276576bc91c71be5423a3a5edaedb109938b414107ddaeec919bb728990eb680cefa2dec25063379cfdb86c6368f184c4018880ea2b9be3848", 0x61) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 12:18:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents(r0, &(0x7f0000000040)=""/95, 0x5f) exit(0x0) getdents64(r0, 0x0, 0x0) 12:18:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000a003000000000000b80100005002000000000000580200001003000008030000080300000803000010030000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b801000000000000000000000000000000000000000028006367726f75700000000000000000000000000000000000000000000000000000000000000000f800726563656e74000000000000000000000000000000000000000000000000fdff000000000000210073797a310000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000e0000001ac1e0001000000000000000076657468315f746f5f6272696467650065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b80000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001ac1414bb00000000000000000000000076657468305f746f5f626f6e640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 1926.086392] ip_tables: iptables: counters copy to user failed while replacing table [ 1926.150425] ip_tables: iptables: counters copy to user failed while replacing table 12:18:47 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x37}, 0x8000000200004d1e, 0x800007c, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) pipe(&(0x7f00000000c0)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) 12:18:48 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x37}, 0x8000000200004d1e, 0x800007c, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) pipe(&(0x7f00000000c0)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) 12:18:48 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x37}, 0x8000000200004d1e, 0x800007c, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) pipe(&(0x7f00000000c0)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) 12:18:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:18:48 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x37}, 0x8000000200004d1e, 0x800007c, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) pipe(&(0x7f00000000c0)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) [ 1926.834212] ip_tables: iptables: counters copy to user failed while replacing table 12:18:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000200)={0x0, 0x4000000009, 0x1}) 12:18:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800dd8d000000000000000002000000000000080000000008000f00", @ANYRES32, @ANYBLOB="04040004"], 0x28}}, 0x10) 12:18:50 executing program 3: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000240)) mlockall(0x1) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0)='gtp\x00') ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) 12:18:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents(r0, &(0x7f0000000040)=""/95, 0x5f) exit(0x0) getdents64(r0, 0x0, 0x0) 12:18:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000a003000000000000b80100005002000000000000580200001003000008030000080300000803000010030000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b801000000000000000000000000000000000000000028006367726f75700000000000000000000000000000000000000000000000000000000000000000f800726563656e74000000000000000000000000000000000000000000000000fdff000000000000210073797a310000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000e0000001ac1e0001000000000000000076657468315f746f5f6272696467650065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b80000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001ac1414bb00000000000000000000000076657468305f746f5f626f6e640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:18:50 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, &(0x7f0000000280)) 12:18:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000680)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d00000000000128588f8fc6716e08d1374a8dbd21b8a77c0731c310d3086a3217fa0cb9e4cefe0569942f46cde7188b007500"}, 0x60) 12:18:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1717], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x80000001) 12:18:50 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000154, 0x40030133, 0x0) [ 1929.165582] ip_tables: iptables: counters copy to user failed while replacing table 12:18:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000680)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d00000000000128588f8fc6716e08d1374a8dbd21b8a77c0731c310d3086a3217fa0cb9e4cefe0569942f46cde7188b007500"}, 0x60) 12:18:51 executing program 4: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000800)="85abdcadf03283550b5c4e5918d6f8379c3559a1b2cc7e6485a9145cd9cebc282429c30e6605ab81", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[{0x10, 0x1, 0x25}], 0x10}}], 0x2, 0x0) 12:18:51 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000680)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d00000000000128588f8fc6716e08d1374a8dbd21b8a77c0731c310d3086a3217fa0cb9e4cefe0569942f46cde7188b007500"}, 0x60) 12:18:51 executing program 0: syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7fff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0}}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 12:18:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0), 0x8) 12:18:52 executing program 3: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000240)) mlockall(0x1) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0)='gtp\x00') ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) 12:18:52 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000680)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d00000000000128588f8fc6716e08d1374a8dbd21b8a77c0731c310d3086a3217fa0cb9e4cefe0569942f46cde7188b007500"}, 0x60) 12:18:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02008b5e5a076d83923dd29c034055b67dafc6c8dc3d5d81c07f34e4d5b318e2ec0efd49897a74a0091ff110c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d78e0c9c15ab3a14817ac61e4dd11183a13477bf00060e3670ef0e789f61f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b691c51160fbcbb010000000000000032e6ea09c346dfebd31a08b32808b80200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab0200d029a119ca3c97278087001460000000000045b43a94a11b0876ec890000000000000000009b17522fe73ad545344769f082f9e308f3ed77283535d6b60ba475a5e57f2f6acddaa4dfb5a73237c536092fd4e86f7a4e36bab38e3f4a246ae187ebb65ae7020000009c6d5e9be8c599b3df995cb1001e10de82a9b6cfff8d030b7f92a60752372ae4e21a70e3f1bf1452c7eb245adbf857ba6f96519af31d76572097f5050d9312436cb9e3787e27b491f80baa27065058765bb7067ebd8733837077dd5403f17a8194350bc71616ba21d19df241a0396652a632e5e80c427800"/682], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632977fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 12:18:52 executing program 0: syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7fff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0}}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 12:18:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0) 12:18:52 executing program 4: syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7fff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0}}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 12:18:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/107) 12:18:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0) 12:18:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02008b5e5a076d83923dd29c034055b67dafc6c8dc3d5d81c07f34e4d5b318e2ec0efd49897a74a0091ff110c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d78e0c9c15ab3a14817ac61e4dd11183a13477bf00060e3670ef0e789f61f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b691c51160fbcbb010000000000000032e6ea09c346dfebd31a08b32808b80200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab0200d029a119ca3c97278087001460000000000045b43a94a11b0876ec890000000000000000009b17522fe73ad545344769f082f9e308f3ed77283535d6b60ba475a5e57f2f6acddaa4dfb5a73237c536092fd4e86f7a4e36bab38e3f4a246ae187ebb65ae7020000009c6d5e9be8c599b3df995cb1001e10de82a9b6cfff8d030b7f92a60752372ae4e21a70e3f1bf1452c7eb245adbf857ba6f96519af31d76572097f5050d9312436cb9e3787e27b491f80baa27065058765bb7067ebd8733837077dd5403f17a8194350bc71616ba21d19df241a0396652a632e5e80c427800"/682], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632977fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 12:18:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a", 0x50}, {&(0x7f0000000380)="c84f6172406074dd", 0x8}], 0x2) ioctl$VT_GETMODE(r0, 0x5601, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) 12:18:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"/682], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632977fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 12:18:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a", 0x50}, {&(0x7f0000000380)="c84f6172406074dd", 0x8}], 0x2) ioctl$VT_GETMODE(r0, 0x5601, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) 12:18:54 executing program 3: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000240)) mlockall(0x1) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0)='gtp\x00') ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) 12:18:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0) 12:18:54 executing program 4: syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7fff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0}}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 12:18:54 executing program 0: syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7fff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0}}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 12:18:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"/682], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632977fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 12:18:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a", 0x50}, {&(0x7f0000000380)="c84f6172406074dd", 0x8}], 0x2) ioctl$VT_GETMODE(r0, 0x5601, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) 12:18:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a", 0x50}, {&(0x7f0000000380)="c84f6172406074dd", 0x8}], 0x2) ioctl$VT_GETMODE(r0, 0x5601, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) 12:18:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) 12:18:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x5) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$batadv(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000ac0)) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x9) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000001080102000000003e000000000300000306000240001600000600024088f500001400048008000140fffff800080002400000860b06001e9edac43302400007000006000240fbfb"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1933.491940] sit0: Cannot use loopback or non-ethernet device as HSR slave. 12:18:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x1f, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) io_submit(r1, 0x3, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000002940)="020000000000", 0x6}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:18:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="5300000044a6aeabec2e15fc1772f14dbc1b3f1000ff034017db9820000000003b08d450ffffb3560000080000ab31c357e3972f4100f5cb88b9ce837c597e9ce5cc027942003607000000001d00009f5d54076bb45f0900"], 0x58) write$binfmt_aout(r0, &(0x7f0000000300)={{}, "", [[0xbfffffff00000000]]}, 0x120) write$binfmt_aout(r0, &(0x7f0000000000)={{}, "", [[0xbfffffff00000000]]}, 0x120) 12:18:55 executing program 0: syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7fff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0}}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 12:18:57 executing program 4: syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7fff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0}}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 12:18:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0) 12:18:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}]}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:18:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4030ae7b, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) 12:18:57 executing program 3: r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) sigaltstack(&(0x7f00005a0000/0x4000)=nil, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 12:18:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000507000000fdff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000201000002400128009000100626f6e64000000001400028008000880ffffffff0800070002000000"], 0x44}}, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dc000000ed0304002bbd7000fcdbdf25953e47e71d561dbcc6da6fb18064598e70f685e79df56b9c0c8ffb4dfdd171d52a3ddcba20ddc8e1f2af6053a2944f"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x24000080) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc000000000000000) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1936.147594] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1936.197681] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1936.217045] CPU: 0 PID: 11100 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 1936.225005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1936.234379] Call Trace: [ 1936.237079] dump_stack+0x13e/0x194 [ 1936.240738] warn_alloc.cold+0x96/0x1af [ 1936.244742] ? zone_watermark_ok_safe+0x280/0x280 [ 1936.249626] ? wait_for_completion+0x390/0x390 [ 1936.254261] __alloc_pages_slowpath+0x2114/0x26c0 [ 1936.259264] ? warn_alloc+0xf0/0xf0 [ 1936.264226] ? find_held_lock+0x2d/0x110 [ 1936.268303] ? fs_reclaim_acquire+0x10/0x10 [ 1936.272658] __alloc_pages_nodemask+0x5d3/0x700 [ 1936.277533] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1936.282661] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1936.287534] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1936.292596] alloc_pages_current+0xe7/0x1e0 [ 1936.296955] kvm_mmu_create+0xd1/0x1c0 [ 1936.300981] kvm_arch_vcpu_init+0x28b/0x8b0 [ 1936.305614] ? alloc_pages_current+0xef/0x1e0 [ 1936.310473] kvm_vcpu_init+0x26d/0x360 [ 1936.314389] vmx_create_vcpu+0xf3/0x2900 [ 1936.318490] ? __mutex_unlock_slowpath+0x75/0x780 [ 1936.323613] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 1936.328680] ? handle_rdmsr+0x6b0/0x6b0 [ 1936.332684] kvm_vm_ioctl+0x49c/0x1430 [ 1936.336594] ? __lock_acquire+0x5f7/0x4620 [ 1936.340849] ? kvm_vcpu_release+0xa0/0xa0 [ 1936.345015] ? check_preemption_disabled+0x35/0x240 [ 1936.350052] ? perf_trace_lock+0x109/0x4b0 [ 1936.354303] ? check_preemption_disabled+0x35/0x240 [ 1936.359339] ? perf_trace_lock+0x109/0x4b0 [ 1936.363625] ? save_trace+0x290/0x290 [ 1936.367447] ? SOFTIRQ_verbose+0x10/0x10 [ 1936.371526] ? kvm_vcpu_release+0xa0/0xa0 [ 1936.375691] do_vfs_ioctl+0x75a/0xfe0 [ 1936.379518] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1936.384316] ? ioctl_preallocate+0x1a0/0x1a0 [ 1936.388764] ? security_file_ioctl+0x76/0xb0 [ 1936.393199] ? security_file_ioctl+0x83/0xb0 [ 1936.397632] SyS_ioctl+0x7f/0xb0 [ 1936.401012] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1936.405004] do_syscall_64+0x1d5/0x640 [ 1936.408925] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1936.414148] RIP: 0033:0x45c829 [ 1936.417349] RSP: 002b:00007fd87d523c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1936.425072] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 1936.432363] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000006 [ 1936.439658] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1936.446956] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1936.454247] R13: 0000000000000390 R14: 00000000004c605c R15: 00007fd87d5246d4 [ 1936.508913] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1936.547597] Mem-Info: [ 1936.566131] active_anon:564507 inactive_anon:181584 isolated_anon:0 [ 1936.566131] active_file:27037 inactive_file:40499 isolated_file:0 [ 1936.566131] unevictable:15761 dirty:25 writeback:0 unstable:0 [ 1936.566131] slab_reclaimable:17664 slab_unreclaimable:132314 [ 1936.566131] mapped:71323 shmem:12028 pagetables:19861 bounce:0 [ 1936.566131] free:515318 free_pcp:623 free_cma:0 [ 1936.693694] overlayfs: filesystem on './file0' not supported as upperdir 12:18:58 executing program 4: r0 = socket$inet(0x10, 0x400000002, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="1b000000180007041dfffd946f610529802000001f040005000008", 0x1b}], 0x1}, 0x0) 12:18:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}]}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') [ 1936.770390] Node 0 active_anon:1421476kB inactive_anon:381852kB active_file:40kB inactive_file:232kB unevictable:30916kB isolated(anon):0kB isolated(file):0kB mapped:230548kB dirty:40kB writeback:0kB shmem:37720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1936.879463] Node 1 active_anon:836552kB inactive_anon:344484kB active_file:108408kB inactive_file:161964kB unevictable:31528kB isolated(anon):0kB isolated(file):0kB mapped:54844kB dirty:60kB writeback:0kB shmem:10392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1936.916466] Node 0 DMA free:10400kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1936.953151] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1936.976002] Node 0 DMA32 free:31944kB min:36272kB low:45340kB high:54408kB active_anon:1421476kB inactive_anon:380544kB active_file:40kB inactive_file:232kB unevictable:26820kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26688kB kernel_stack:16576kB pagetables:55444kB bounce:0kB free_pcp:1320kB local_pcp:692kB free_cma:0kB [ 1937.254670] lowmem_reserve[]: 0 0 0 0 0 [ 1937.284082] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1937.376129] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1937.497617] lowmem_reserve[]: 0 0 0 0 0 [ 1937.506588] Node 1 Normal free:2027220kB min:53612kB low:67012kB high:80412kB active_anon:836504kB inactive_anon:348184kB active_file:129680kB inactive_file:160528kB unevictable:88kB writepending:268kB present:3932160kB managed:3870192kB mlocked:20kB kernel_stack:14560kB pagetables:24000kB bounce:0kB free_pcp:1280kB local_pcp:620kB free_cma:0kB 12:18:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x5) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$batadv(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000ac0)) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x9) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000001080102000000003e000000000300000306000240001600000600024088f500001400048008000140fffff800080002400000860b06001e9edac43302400007000006000240fbfb"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:18:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}]}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:18:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}]}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:18:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000507000000fdff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000201000002400128009000100626f6e64000000001400028008000880ffffffff0800070002000000"], 0x44}}, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dc000000ed0304002bbd7000fcdbdf25953e47e71d561dbcc6da6fb18064598e70f685e79df56b9c0c8ffb4dfdd171d52a3ddcba20ddc8e1f2af6053a2944f"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x24000080) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc000000000000000) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') [ 1937.628611] lowmem_reserve[]: 0 0 0 0 0 12:18:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}]}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') [ 1937.669147] Node 0 DMA: 6*4kB (UMEH) 5*8kB (UE) 6*16kB (UEH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10400kB [ 1937.747745] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1937.809136] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1937.849001] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1937.873908] CPU: 1 PID: 11165 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 1937.883063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1937.887434] Node 0 [ 1937.892544] Call Trace: [ 1937.892569] dump_stack+0x13e/0x194 [ 1937.892584] warn_alloc.cold+0x96/0x1af [ 1937.892595] ? zone_watermark_ok_safe+0x280/0x280 [ 1937.892620] ? wait_for_completion+0x390/0x390 [ 1937.892636] __alloc_pages_slowpath+0x2114/0x26c0 [ 1937.892664] ? warn_alloc+0xf0/0xf0 [ 1937.892680] ? find_held_lock+0x2d/0x110 [ 1937.907570] DMA32: [ 1937.910466] ? fs_reclaim_acquire+0x10/0x10 [ 1937.910491] __alloc_pages_nodemask+0x5d3/0x700 [ 1937.910506] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1937.910516] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1937.910526] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1937.910550] alloc_pages_current+0xe7/0x1e0 [ 1937.910566] kvm_mmu_create+0xd1/0x1c0 [ 1937.925539] 445*4kB [ 1937.928550] kvm_arch_vcpu_init+0x28b/0x8b0 [ 1937.928565] ? alloc_pages_current+0xef/0x1e0 [ 1937.928580] kvm_vcpu_init+0x26d/0x360 [ 1937.928594] vmx_create_vcpu+0xf3/0x2900 [ 1937.928611] ? __mutex_unlock_slowpath+0x75/0x780 [ 1937.928625] ? handle_rdmsr+0x6b0/0x6b0 [ 1937.928643] kvm_vm_ioctl+0x49c/0x1430 [ 1937.928658] ? __lock_acquire+0x5f7/0x4620 [ 1937.981551] (UMEH) [ 1937.983426] ? kvm_vcpu_release+0xa0/0xa0 [ 1937.983441] ? check_preemption_disabled+0x35/0x240 [ 1937.983458] ? perf_trace_lock+0x109/0x4b0 [ 1937.983471] ? check_preemption_disabled+0x35/0x240 [ 1937.983484] ? perf_trace_lock+0x109/0x4b0 [ 1938.025666] ? save_trace+0x290/0x290 [ 1938.030578] ? SOFTIRQ_verbose+0x10/0x10 [ 1938.034597] 1147*8kB (UMEH) [ 1938.034662] ? kvm_vcpu_release+0xa0/0xa0 [ 1938.034671] 661*16kB [ 1938.037702] do_vfs_ioctl+0x75a/0xfe0 [ 1938.037720] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1938.037734] ? ioctl_preallocate+0x1a0/0x1a0 [ 1938.037759] ? security_file_ioctl+0x76/0xb0 [ 1938.037772] ? security_file_ioctl+0x83/0xb0 [ 1938.066198] SyS_ioctl+0x7f/0xb0 [ 1938.069598] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1938.073996] do_syscall_64+0x1d5/0x640 [ 1938.078009] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1938.083228] RIP: 0033:0x45c829 [ 1938.086690] RSP: 002b:00007fd87d4e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:18:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}]}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:18:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}]}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') [ 1938.094866] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 1938.097852] (UMEH) [ 1938.102148] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000006 [ 1938.102155] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 1938.102161] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1938.102166] R13: 0000000000000390 R14: 00000000004c605c R15: 00007fd87d4e26d4 [ 1938.548329] 176*32kB (UMEH) 12*64kB (UME) 1*128kB (H) 7*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 32924kB [ 1938.724255] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1938.875999] Node 1 Normal: 1*4kB (M) 2*8kB (ME) 1*16kB (E) 215*32kB (UM) 298*64kB (UE) 63*128kB (UM) 134*256kB (UME) 84*512kB (UME) 24*1024kB (UME) 7*2048kB (UM) 455*4096kB (UM) = 2013956kB [ 1939.058861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1939.179098] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1939.279244] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1939.354801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1939.436078] 82010 total pagecache pages [ 1939.465191] 0 pages in swap cache [ 1939.506987] Swap cache stats: add 0, delete 0, find 0/0 [ 1939.583263] Free swap = 0kB [ 1939.603665] Total swap = 0kB [ 1939.623868] 1965979 pages RAM [ 1939.648860] 0 pages HighMem/MovableOnly [ 1939.673434] 339050 pages reserved [ 1939.685655] Mem-Info: [ 1939.699154] active_anon:564463 inactive_anon:181609 isolated_anon:0 [ 1939.699154] active_file:27058 inactive_file:39205 isolated_file:0 [ 1939.699154] unevictable:17776 dirty:32 writeback:0 unstable:0 [ 1939.699154] slab_reclaimable:17612 slab_unreclaimable:133382 [ 1939.699154] mapped:71355 shmem:12028 pagetables:19809 bounce:0 [ 1939.699154] free:513876 free_pcp:584 free_cma:0 [ 1939.708376] 0 pages cma reserved [ 1939.806410] Node 0 active_anon:1421476kB inactive_anon:381852kB active_file:44kB inactive_file:260kB unevictable:30916kB isolated(anon):0kB isolated(file):0kB mapped:230544kB dirty:16kB writeback:0kB shmem:37720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1939.884747] Node 1 active_anon:836376kB inactive_anon:344584kB active_file:108188kB inactive_file:154260kB unevictable:40188kB isolated(anon):0kB isolated(file):0kB mapped:54776kB dirty:0kB writeback:16kB shmem:10392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1939.966356] Node 0 DMA free:10400kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1940.026939] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1940.038430] Node 0 DMA32 free:36728kB min:36272kB low:45340kB high:54408kB active_anon:1421476kB inactive_anon:380544kB active_file:44kB inactive_file:260kB unevictable:26820kB writepending:0kB present:3129332kB managed:2621268kB mlocked:26688kB kernel_stack:16576kB pagetables:55444kB bounce:0kB free_pcp:1224kB local_pcp:584kB free_cma:0kB [ 1940.108055] lowmem_reserve[]: 0 0 0 0 0 [ 1940.116654] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1940.172098] lowmem_reserve[]: 0 0 0 0 0 [ 1940.180951] Node 1 Normal free:2031932kB min:53612kB low:67012kB high:80412kB active_anon:836212kB inactive_anon:345084kB active_file:129712kB inactive_file:152708kB unevictable:48kB writepending:136kB present:3932160kB managed:3870192kB mlocked:20kB kernel_stack:14272kB pagetables:23736kB bounce:0kB free_pcp:1076kB local_pcp:408kB free_cma:0kB [ 1940.220666] lowmem_reserve[]: 0 0 0 0 0 [ 1940.224740] Node 0 DMA: 6*4kB (UMEH) 5*8kB (UE) 6*16kB (UEH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10400kB [ 1940.242759] Node 0 DMA32: 508*4kB (UMEH) 1583*8kB (UMEH) 668*16kB (UMEH) 178*32kB (UMEH) 12*64kB (UME) 1*128kB (H) 7*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 36840kB [ 1940.261945] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1940.278562] Node 1 Normal: 260*4kB (UM) 468*8kB (UME) 124*16kB (UM) 178*32kB (UME) 358*64kB (UM) 128*128kB (UME) 134*256kB (UM) 83*512kB (UME) 25*1024kB (UME) 8*2048kB (UM) 455*4096kB (UM) = 2034224kB [ 1940.297491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1940.308519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1940.317716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1940.328527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1940.337675] 80713 total pagecache pages [ 1940.343526] 0 pages in swap cache [ 1940.347099] Swap cache stats: add 0, delete 0, find 0/0 [ 1940.354855] Free swap = 0kB [ 1940.359173] Total swap = 0kB [ 1940.362249] 1965979 pages RAM [ 1940.365372] 0 pages HighMem/MovableOnly 12:19:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4030ae7b, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) 12:19:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}]}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}]}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000507000000fdff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000201000002400128009000100626f6e64000000001400028008000880ffffffff0800070002000000"], 0x44}}, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dc000000ed0304002bbd7000fcdbdf25953e47e71d561dbcc6da6fb18064598e70f685e79df56b9c0c8ffb4dfdd171d52a3ddcba20ddc8e1f2af6053a2944f"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x24000080) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc000000000000000) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 12:19:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{}, {}, {0x8, 0x3}, {}, {0x8, 0x4}]}, 0x4c, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x5) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$batadv(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000ac0)) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x9) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000001080102000000003e000000000300000306000240001600000600024088f500001400048008000140fffff800080002400000860b06001e9edac43302400007000006000240fbfb"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1940.371629] 339050 pages reserved [ 1940.375118] 0 pages cma reserved [ 1940.511022] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on 12:19:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4030ae7b, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) 12:19:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x5) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$batadv(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000ac0)) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x9) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000001080102000000003e000000000300000306000240001600000600024088f500001400048008000140fffff800080002400000860b06001e9edac43302400007000006000240fbfb"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:19:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4030ae7b, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) 12:19:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000507000000fdff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000201000002400128009000100626f6e64000000001400028008000880ffffffff0800070002000000"], 0x44}}, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dc000000ed0304002bbd7000fcdbdf25953e47e71d561dbcc6da6fb18064598e70f685e79df56b9c0c8ffb4dfdd171d52a3ddcba20ddc8e1f2af6053a2944f"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x24000080) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc000000000000000) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') 12:19:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) accept4$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) [ 1941.740724] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on 12:19:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000740)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f00000002c0)={{0x0, 0x0, @descriptor="f9bcfb99026e56cb"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4030ae7b, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) 12:19:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4030ae7b, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) 12:19:04 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x202002, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='ecryptfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 1942.945174] Error parsing options; rc = [-22] [ 1942.989859] Error parsing options; rc = [-22] 12:19:04 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x202002, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='ecryptfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 12:19:04 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc0a85320, &(0x7f0000000240)={0x80, 0x0, 0x0, 'queue1\x00'}) [ 1943.134490] Error parsing options; rc = [-22] 12:19:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x5) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$batadv(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000ac0)) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x9) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000001080102000000003e000000000300000306000240001600000600024088f500001400048008000140fffff800080002400000860b06001e9edac43302400007000006000240fbfb"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:19:04 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x6) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) [ 1943.406578] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1943.485716] selinux_nlmsg_perm: 5 callbacks suppressed [ 1943.487751] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11416 comm=syz-executor.2 [ 1943.565568] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11416 comm=syz-executor.2 [ 1943.652282] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11416 comm=syz-executor.2 [ 1943.754238] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11416 comm=syz-executor.2 [ 1943.811722] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11416 comm=syz-executor.2 [ 1943.862816] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11416 comm=syz-executor.2 [ 1943.920199] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11416 comm=syz-executor.2 [ 1943.976973] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11416 comm=syz-executor.2 [ 1944.014063] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11416 comm=syz-executor.2 [ 1944.044481] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11416 comm=syz-executor.2 12:19:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x5) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$batadv(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000ac0)) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x9) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000001080102000000003e000000000300000306000240001600000600024088f500001400048008000140fffff800080002400000860b06001e9edac43302400007000006000240fbfb"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:19:05 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x202002, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='ecryptfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 12:19:05 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x81001) sendfile(r0, r1, 0x0, 0x102002700) 12:19:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4030ae7b, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) 12:19:05 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x6) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 12:19:05 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x202002, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='ecryptfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 1944.165176] Error parsing options; rc = [-22] [ 1944.278726] Error parsing options; rc = [-22] 12:19:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8)=0x600, 0x8000fffffffe) [ 1944.334809] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'. 12:19:06 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x81001) sendfile(r0, r1, 0x0, 0x102002700) [ 1944.453584] audit: type=1804 audit(1587471546.161:4983): pid=11460 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2413/bus" dev="sda1" ino=16243 res=1 12:19:06 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x81001) sendfile(r0, r1, 0x0, 0x102002700) 12:19:06 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x6) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) [ 1945.225075] audit: type=1804 audit(1587471546.931:4984): pid=11481 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2413/bus" dev="sda1" ino=16243 res=1 [ 1945.350952] audit: type=1804 audit(1587471546.981:4985): pid=11460 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2413/bus" dev="sda1" ino=16243 res=1 [ 1945.395681] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'. 12:19:07 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 12:19:07 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xbd22) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000340)="1c6837e0cdbbe254e1ac7cd4f78e6ba327e737e06b449f9cb9ec1e5cd7a64dc43eed8ffe73cd0a4a201f305ffb2ad0bb00148b2cbe718ee3f2916d327ab1e2fe7361fbb262716dd89b4a906765e35a3db071508b74942b365934dc210a0dcdca", 0x60}, {0x0}, {&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000640)="26e3c8070456d7efa949149c7d3094c48ad74e3b4b47ea37ada040b926eb1da7d67edf54d6774461f6acdc4a349cfdbc58504c84a13a9ec3c3dc8af5f7a05712bf147de88d3a609a745a771b4a62525fe5ff41a2dbd31c8534533ffded4c54baab89441636479fe61b0646b70950c2", 0x6f}], 0x5) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x3c, 0x3, 0x8, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000800}, 0x41) 12:19:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x5) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$batadv(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000ac0)) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x9) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000001080102000000003e000000000300000306000240001600000600024088f500001400048008000140fffff800080002400000860b06001e9edac43302400007000006000240fbfb"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:19:08 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x81001) sendfile(r0, r1, 0x0, 0x102002700) 12:19:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xf) 12:19:08 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x3, r0, 0x0, 0x0) keyctl$setperm(0x5, r0, 0x0) 12:19:08 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x6) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 12:19:08 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 12:19:08 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 1946.670881] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'. 12:19:08 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x404, 0x0, 0x0, 0x0, 0x206}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 12:19:08 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 12:19:08 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 12:19:08 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x404, 0x0, 0x0, 0x0, 0x206}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 12:19:08 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 12:19:09 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x404, 0x0, 0x0, 0x0, 0x206}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 12:19:09 executing program 1: socket(0x11, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0xce) timerfd_create(0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x1002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000500)='2', 0x1}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x501, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0xc, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0) 12:19:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x1b0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f00000000c0)="4e12f4bce87ad904704b884b9a7a90ab79b855e23faa078c44da152757b533a068d8a03e9adc5eedcdc9a6b71953751805a67911ca3fc277b5be37847a1669d82f1050cd3f8c7a1c1746c14a8ac5d5a3a2ab2c23a31a0529559aca16bee6822748fedefdf49fc055cdf4b569485b89b39d2a76cc527b80d5026c4539d14c94298f00d01b7e7b292db4330612ea5c1886dfb93a540f052bd877c703344d99993b486e45f07ad713a6", 0xa8) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 12:19:09 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 12:19:09 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 12:19:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000040)) 12:19:10 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x404, 0x0, 0x0, 0x0, 0x206}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 12:19:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) recvmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000200)=""/210, 0xd2}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 12:19:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x3}) 12:19:10 executing program 1: socket(0x11, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0xce) timerfd_create(0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x1002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000500)='2', 0x1}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x501, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0xc, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0) 12:19:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 12:19:10 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 12:19:10 executing program 1: socket(0x11, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0xce) timerfd_create(0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x1002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000500)='2', 0x1}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x501, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0xc, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0) 12:19:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x2c4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0), 0x4) 12:19:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) sendfile(r3, r3, 0x0, 0x8080fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 12:19:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07ad6706000002000000070600000ee60000bf2500000000000063350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad300100000000008400000000000000050000000000000095000000000000006e8ad524a56601a5fc9a76d1fd2735636b3e7523984e4dc87ca658e5f2e9407e5c2501d119febf3a1b93db85604036883647b1fb3f1403b816f511c8c56e56e40b00095505f8a89dae4293b1263631b25fc9f189084c7fddcc"], &(0x7f0000000100)='GPL\x00'}, 0x48) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) 12:19:11 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 12:19:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x18, 0x0, 0x0, 0x0) 12:19:11 executing program 1: socket(0x11, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0xce) timerfd_create(0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x1002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000500)='2', 0x1}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x501, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0xc, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0) 12:19:11 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x8) 12:19:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x18, 0x0, 0x0, 0x0) 12:19:11 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x8) 12:19:11 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x10, 0x0, 0xfffffffd, 0x0, 0x0, 0x5f, 0x9}, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x389ac0000000, 0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='cpu&3\x0e\x00\n\xc0\xf9*`\x00OE\xd2&hIC\xff0&e\x10\xb1\x85o\x9e\xc4\xb5=\xb6\x85\x80\x14\xcem\xda\x85\x16ew\xd6\xecC\xa6\xbf\x16#\xb9\xb7;\xa2z\xc8\xca\xeb\x82\aU\x13\xb4Y\xa9LO^R\xf3\xbcM\x1c\xa2G\x87\xea4\xa1tlo|\xb2\xad\xc7~\x11\xe9:w2\xd1A\xda\x04\xb3F\xe7\xfb\xe9\xb0\xd3\'H\xed') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xfc8) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x200, 0x7, 0x6, 0x10001, 0x1}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) 12:19:11 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 12:19:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) 12:19:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x18, 0x0, 0x0, 0x0) 12:19:11 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x8) 12:19:12 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x8) 12:19:12 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141143, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001100)=ANY=[@ANYRES64]) 12:19:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) 12:19:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x18, 0x0, 0x0, 0x0) 12:19:12 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x10, 0x0, 0xfffffffd, 0x0, 0x0, 0x5f, 0x9}, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x389ac0000000, 0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='cpu&3\x0e\x00\n\xc0\xf9*`\x00OE\xd2&hIC\xff0&e\x10\xb1\x85o\x9e\xc4\xb5=\xb6\x85\x80\x14\xcem\xda\x85\x16ew\xd6\xecC\xa6\xbf\x16#\xb9\xb7;\xa2z\xc8\xca\xeb\x82\aU\x13\xb4Y\xa9LO^R\xf3\xbcM\x1c\xa2G\x87\xea4\xa1tlo|\xb2\xad\xc7~\x11\xe9:w2\xd1A\xda\x04\xb3F\xe7\xfb\xe9\xb0\xd3\'H\xed') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xfc8) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x200, 0x7, 0x6, 0x10001, 0x1}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) 12:19:12 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x10, 0x0, 0xfffffffd, 0x0, 0x0, 0x5f, 0x9}, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x389ac0000000, 0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='cpu&3\x0e\x00\n\xc0\xf9*`\x00OE\xd2&hIC\xff0&e\x10\xb1\x85o\x9e\xc4\xb5=\xb6\x85\x80\x14\xcem\xda\x85\x16ew\xd6\xecC\xa6\xbf\x16#\xb9\xb7;\xa2z\xc8\xca\xeb\x82\aU\x13\xb4Y\xa9LO^R\xf3\xbcM\x1c\xa2G\x87\xea4\xa1tlo|\xb2\xad\xc7~\x11\xe9:w2\xd1A\xda\x04\xb3F\xe7\xfb\xe9\xb0\xd3\'H\xed') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="73797a30c052da398307f1beae18204f1133eb6263cda717e400b4d6c46971343c837d2f37414a35b550eba360167f46c94e124d884937c6147750fbbae030e0719722c7a0f4781ab7476133543b8d7236b2e165cdca033a16a38fcc971134fc5b27316364bf7411ef55eba53ff46cd5444a2160288033e577e5e18214df184970cef6a0ee5fd3fb32b2322de217e3337382bb548ed2d3bf26b21b8a0ffc1b8ae466f49195ba8396a5d8a3ddb5d038f37e612602644ea28da02e7bb0370b5134b8a395b2ae60819440f066e85e38563aa315e1a8a7cba1aee0179d070303308ec8dfbe77f9d4ac6b581c1d64332c87e4b7ff6bb21b72b8fff8e240df60600aec95eb923bca73452725d96208a744e6e7df5086d47317e82c9a1756ca2167580eb85a5723f94e36c00e6ce9bae0cb5075cd7b99cd45e1c37885cfa7a88d319e6de7bff55a84de46ec6178a2ef5008d2ec432b23ac142a12a65f9f9c2e0591ee1736d3d07d41e324d1c2c5800804ef0395c0239abb9505789cdbb7514a4cd5327061c591a7080f7597e6a529c411d011a45bb1badccefcfbd4fc3622e3e25eb2aec721202b4dc0dcbd8efc53da7931661bd5365d33a409f411d02549a80727d92649b6bbf17678e7e1e2c49438bedc6de958214c8702c90a08af2c971d50e79160eaa64037f1e42a0ff2783d774061c68a23b2a5198b1e8256288b6c9838c87195f1d33352cd89b6875dc26860e1bf43c5c9204d1e6168ebf9a631be3b2da69be7504525780eae2b4e21fd86fcf163c607477cf3e120d04544ab8d78bcf7eff1bda06b8b0bc21232d46375407fd1810b72304fca39d3a8afe6ea031c699b6bdc8f66d189e4ffee6496ae505d4a4625e1004b2135334be9fb09d2769b447176243f183d53d1fddf3b2dedc65bb161cb1cfcbe731219f13fd58a0e37a1e3a441b1823c7d795ad14616b21b5d6a771e70d1e861a986eef651faf2611ec9eaebad2ec243079ac2f2191ae466bbcb899c73fd1d706b16e371a95e5ec6c346a817d625ddb84ec13ae6d6c43dbae25a7a35341a04e2a5fbcf09c4a451c10e024d745becabf017433ad40eb5282fcc69216971bbeff618d697a1701756b5d873a06c32f4fc685fd3fc7ee2fd2be90c1a1d7484e03ffc31edcc43b05c0b65bf05890022f28ee606f3edb5cd3b9e60c9f2ace97fd4a9bd0c1da67d7b122ab6a454a0dfdc6ea15ec38b94ad18cfd4bf4d0bc4ae8152bbdfeca5fdfbe81afead041b7eb29f349a5ba3442f8281a90a76bc307c0fc1ebf1bab20b98b2c058c0fc956fe8e3ff3904bbb3cd96f8372b3602b126f2eb762df4ae5f2a8d85e3ec7552b88c6f090d8707bb3227c8d21b23bcb7e126cedaee42eee6ddc22fc76ab6f59cb806175fcee45ee302131ff3e7404504ef885779287b808f722b8f36e2aac173ddc53cd8e7e3e22603d1488fe682324d15e87b7fda77c1e14e4be844c91f854e79747049429705a6b1094c108851f91b4a10317cd91b4c1db4e6d6c689eaac58812a6b0406e4cae53d69dfb06ebf4e84a33745eac6ac15418b1f7f0c38236429cd622a745b14c57df05feb3034026fed1e04366023a138c2ace2ecfd981176067e89396a4a69a2010564b4ab26363cfc34000de278a67c164f8465ffc8c65597ef79286c017f8c5d46beceabe494bb363d144069ef716a5385eda03e3844297cea799bc6af02d395ea0ed328f16572b2cd25f53353259744fe2e5b2c39afbf0e0398a4bcf76a67e37ccaa2d2f51b045ec8714f7ca6d32c992aabb7fe09cdfcd54c95c61fdd54e4adaad0448badf2c7998ad8e4501700d429ad9dbac97b103e025ead8641190210e446600871bd957af56fe718bc62f22808a1b6d49bdfefcdac8bc6a58fb2fb609f1f0bc770e00c73a354bf815d87f0aba1d6719d2c85c6f48ec161533092eecc9b304b0bdd5388015b478bb84860bf7068541f0a9796a960cffac4fb83209cfebe4b8966d4eed1a86508329bfb02be002fd4068d820a3c3a323b66261f8a9b62a740ab3c997aed3c49be0f4b5f8adef31dd891d02ddf1a9ab90e7bdd6446e3c843af84e6816b353f1196e8279fe12eb472ca856a766d20e8f45bd79bb163cf355930f0e90e38d2618066c394392bdf4d661d8086559f8c143b8aff7300a398bea3c71f5917289653e0c2c2e77eac4c5df235b18c76b376c4e3bc4790c576e5dac36b9c83978baad8a9b854493f473161dfc8a5430a84dc886136b5ec0844ba6c5183224647c66e25af564c3a8254efd348830231cb41299c5926870d9645026f86189852eb786d0abdad46afcca503370f3335f1bde69f998aad41a60259913b4984a13dbf7e6c6feab9a71c7cae8ca104a2166fa33ecd81162457b63e3347a8c7dce94819a2894873569f8ff482b510bebc05282df9661d704c2dfd6a63c13e16bf10537c0fcb1732cb85815cee7f4e12ad5285ebe620e16647d3e55ca0ee102c18469bb9fbd31fb0bab16f8a2b8c3c36d9bd4d2fcc067d461522f9d24d6c493dd887d40b4340cbbb5aa139921b65f687aa5be5925b52123d595d8896807fe2480008d97ddc25289108b27be3eb0e2ad9f1c7c8bc464bb9db415c1141a9ae15ddaa6b773926883b51d2863292db715396fd3b204f14c24472441c6c17d7389c7e18c88ddfbd08c327320ad82496192c1d23d261cefcb66f696a3488c9ceb5e87e6f3ba7ae5260950871c6fd08f58299dd00583c1dae4c18fab15f36ce770f2cc10f698650afb171d6d6a6b43d2fdee97f387916cddf97170ad4a9d022e24e514009c8e37cb5fac265fb04765d29d4299336c9a8ea25709a12f6c708a2f9ec3d999c132774bc8e85e998e3cfe71a5f8ee533a5c9a6f635055a16e1d0fa268e337ce11557c81d094f3c56608284b0408921cea8b5b326ddfada3738067f76e3a9a50b90dd51c79b63a92681fd6ac535f1accd6b7e479dc5198469a464dfb320685bcadbd5018fa8cc1f9fd6953c21f615325e30c017c63ac4c5504587d52a9a151ab6565349e668a307342c9b1864352bd12fa43f405581ec806fc2d04e0a71dd97b9a66aed79d45f28beb473cffa3095b123b3462b8bdbc1cbbe5dcf42c261d31dff469f038bd4fb6f47ebe28bbd4b57afc34135c7794c0b975ee33cf9409f6401188b658e3aea54c551847575251a5d8476fa85c91b4f846fa6a207cfef641dae3573882656945b54b91343b62e9af1e0b00bb665413ea5aa404f21022fc368face7cbe6c303fa95cfaa6d553af374cf0820a43502f3a7a9b6953cae645ee5648322224c57f3d10c55fb994f4ffc4f656f8907cc371a901ab7d0cdd9e58d5620af369247a1abd75d335d92f8f6bef574118180aa2070cefe14298a8e2a86b34eeba323c035892f61e678ad8a23a2021bf769be8af9bf9a5fc64bdc21b97477d2cd909221b667e13f432eaa5bb5d344bcf5f8263b03832afa184cff61c7e0f0e3f1c9bec6cb4c62c9452f0efaab416f8d0582095b4c5d046408cb303bac459c970775020f2d03d733da23608d3136cbc87d37a5a6145aa54bffad94e442b0e98cdc01da9d72ab057f636a4aafd5189421e07719037726f8f0db4f0e1bbc65a5b014a365c6617b3157b50f48d51e01843a174e5499e0347497e05cac8b7a1007755b86586f94bf1a076a0e0b1f3ba6f828d12da0c4a36194f078c675b8de13d5e92691f043951f6929a8e4cf3f73f77bb95b0bd0f1baf20188cb506d3551d9f6c395770e127ac56484541c41d5823328d02976fe662e1526c2d566d0a4f86e3c62d5053ecb04affa3cc7e6227885189f34b975850c0e180027c9996c959dcc59015aa3583f25904524e771a0c171394426c70ddb2b3a7788c7ddad9c51a45ca31ae27ab6a7c1c69d77b6c27cb68efef2af915b6917674bcbde2ff72851244f004762e3e67d336a5d213736ea94875c0bfbc80074934b2ec7c155405e76d5e25a64164a6741c0b6eded6f8967b9e061d091e427ffed6b2224b735f8deecdf0451a5b2dda748489570d9b037b40eed1ff85ee503d2fa148d0604618a7b0a058d81db7019b0062de916e091ad01e8a28d21e0e9e20854677f6a0d3e9b04f23bba87289126f293f5a597c12328a59828c698fef439ac1106226f2b2990caa63467a7abf24bc3465a0f118cbe6eb620a147c3abfbdcc175d594caa20d85b00805eb394e6b4bcd26b7d56543855c82634483307a92db5d88aff48e694e71ffdb4824882fc9face10a459d97f307b37b003b678aa74a105a0675c2653c382f4363af6c1b040237d2f8f487b1efcca52de2478fbf63f992eea005e54657e26a8b27588300db576d74fdfbdf80cf0644af9c8357f6fe62fa5b3aed51af6b8afc503ff8d08e816f6271ce13255fedaa6760023aadcdedd5873cb92fde17087451c06bfc6acc460cf9155952a0c797ebc3a402299af6242891d273d26e9e22fafb8be4e483d46844fa869cfa8d72f0c77601303cfe4ae76f5b0e2d87a3d781ddfa41fb8304bf4855c9930d01039c92934a0065d2c9078c9931066b7feff9a53342794348720fa4dec2066853ece6396dcc5340f7194944a4c4d782630e22bcaa918678d4b56d5e190edd84e1488e2859047720e60f4a1a6b850fc25cb1cbed61120202e40294dafb37c1a505188ee49e5fb894eda3b7b25c52f7b378f6044a8696fe0aa8d7a56a997d8548a55834be72ee819ebc9af070b809201b75875c5aa8cb5ef566b4061eaacc7678a3c4cc1c9356653f2f23c9a33701d9e58bd0085f603079a5f33e24fc2b3c5a725f02f18b761d99352cbb264d4d562ec845cfb51b9cd2300327d0dc5bcb9daedde2b14597b9759a9202eea216e742d038bf4501d17db644f275565977c2e3e09785953edafd1ee813fb08f30f86846bdcdd6249b53a43eb59cb0a3c873df08008279a94e5fcedf9137552cca1166680aec464097d5ff4bfd0e9bcef0ee86aa35bb4ce0431db07a9159398ababad64a4b0f8da1e3fabd4fb28340468be9a61ce6fd6a0eaafb4757cb1d9c31d167e1ec152a712951af1b038673f9ee01648818a6c6e2fbe750acc2e5a13accb473eaf80d21f710885908bec1bdd6fa303e73f968f1d991465b90d7b640d24cc9a5cf05c512e05d3ec3a0900054cd6b914ac4a27cbdb0af9cd6d3cc0d4058e13c134b3a21d8e1add6058a65ad3f50145f2b82c967dbac15329a7c59ebc5f4c6eb35b1ecf3f5627d89b2f921ccf9409b59362906f11795911e35e1f33ac39ddb87e9f43442efffe9c0f769c9eb32cbd89e47dc84e00089bdebe7ca5f93478df4515f33315a99afa0e66539b0ff30f0136b125eacfc5a84b00030bd2e48746eaec2c0c335112b6c3fb8cd5b3898610d5942eaf6cacf97a8ce7204248668e7235693b87a2ee68a1dc0b6a9fad1ab0f4520765898ec29f14ad7be806d7e9a53393dfd72f91c62e3146b1490bedd56d8331f09ffdab0d9ae1fcf6e9cd1fb4462055908a13315902152c5b711684fbdc761026b09cf0cb5888efaad804c9ed9f64046ba6b764fd841ed3bd71c37187476b0498bb99d91d3b9a146282b88c64ccc276a0018ca99d4e87daddc9b003204787be41d468613c790ccd9f7b60fcaeaf26f949e5b62c34a713523f9cb4667e93dcb383abbdc33f706b5a71fc11672714d1c6f2b6a0a4159b563663238e32c09507a8e26de5d08fe14648d8"], 0xfc8) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x200, 0x7, 0x6, 0x10001, 0x1}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) 12:19:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x8a441) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f00000001c0)={0x600, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "abb4291edede260d00f0a272134e83bbe884c41fc6faced4210500000000000000ffffff7ffff7090000000000d14704100000000000000000000113003e00", "141f420fffff00002300000e00000002000000254754d5a60000007f6e18f8000000000000000000000000000000000000000000007f6200", "0080ffffe60600ce0000000000f89e2319be455c003fac147430ffca37000c00"}) 12:19:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) 12:19:12 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x80b183, 0x28120001) 12:19:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x8a441) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f00000001c0)={0x600, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "abb4291edede260d00f0a272134e83bbe884c41fc6faced4210500000000000000ffffff7ffff7090000000000d14704100000000000000000000113003e00", "141f420fffff00002300000e00000002000000254754d5a60000007f6e18f8000000000000000000000000000000000000000000007f6200", "0080ffffe60600ce0000000000f89e2319be455c003fac147430ffca37000c00"}) 12:19:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) ioprio_get$uid(0x3, r1) 12:19:12 executing program 0: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 12:19:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x8a441) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f00000001c0)={0x600, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "abb4291edede260d00f0a272134e83bbe884c41fc6faced4210500000000000000ffffff7ffff7090000000000d14704100000000000000000000113003e00", "141f420fffff00002300000e00000002000000254754d5a60000007f6e18f8000000000000000000000000000000000000000000007f6200", "0080ffffe60600ce0000000000f89e2319be455c003fac147430ffca37000c00"}) 12:19:12 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000140)={{}, [@rose, @default, @default, @remote, @remote, @netrom, @rose, @null]}, &(0x7f00000000c0)=0x48) 12:19:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c002000000000000000000009800000000000000000000002802000028020000280200002802000028020000040000000000000000000000ac141400ac1414bb000000000000000000000000000000000000000000000000626f6e645f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000005c5a7bbe000000000000700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000010000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007191000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61726b000000000000000000000000000000000000000000000000000100000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000fc0000000000feffffff"], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) 12:19:12 executing program 0: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 12:19:12 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x10, 0x0, 0xfffffffd, 0x0, 0x0, 0x5f, 0x9}, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x389ac0000000, 0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='cpu&3\x0e\x00\n\xc0\xf9*`\x00OE\xd2&hIC\xff0&e\x10\xb1\x85o\x9e\xc4\xb5=\xb6\x85\x80\x14\xcem\xda\x85\x16ew\xd6\xecC\xa6\xbf\x16#\xb9\xb7;\xa2z\xc8\xca\xeb\x82\aU\x13\xb4Y\xa9LO^R\xf3\xbcM\x1c\xa2G\x87\xea4\xa1tlo|\xb2\xad\xc7~\x11\xe9:w2\xd1A\xda\x04\xb3F\xe7\xfb\xe9\xb0\xd3\'H\xed') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="73797a30c052da398307f1beae18204f1133eb6263cda717e400b4d6c46971343c837d2f37414a35b550eba360167f46c94e124d884937c6147750fbbae030e0719722c7a0f4781ab7476133543b8d7236b2e165cdca033a16a38fcc971134fc5b27316364bf7411ef55eba53ff46cd5444a2160288033e577e5e18214df184970cef6a0ee5fd3fb32b2322de217e3337382bb548ed2d3bf26b21b8a0ffc1b8ae466f49195ba8396a5d8a3ddb5d038f37e612602644ea28da02e7bb0370b5134b8a395b2ae60819440f066e85e38563aa315e1a8a7cba1aee0179d070303308ec8dfbe77f9d4ac6b581c1d64332c87e4b7ff6bb21b72b8fff8e240df60600aec95eb923bca73452725d96208a744e6e7df5086d47317e82c9a1756ca2167580eb85a5723f94e36c00e6ce9bae0cb5075cd7b99cd45e1c37885cfa7a88d319e6de7bff55a84de46ec6178a2ef5008d2ec432b23ac142a12a65f9f9c2e0591ee1736d3d07d41e324d1c2c5800804ef0395c0239abb9505789cdbb7514a4cd5327061c591a7080f7597e6a529c411d011a45bb1badccefcfbd4fc3622e3e25eb2aec721202b4dc0dcbd8efc53da7931661bd5365d33a409f411d02549a80727d92649b6bbf17678e7e1e2c49438bedc6de958214c8702c90a08af2c971d50e79160eaa64037f1e42a0ff2783d774061c68a23b2a5198b1e8256288b6c9838c87195f1d33352cd89b6875dc26860e1bf43c5c9204d1e6168ebf9a631be3b2da69be7504525780eae2b4e21fd86fcf163c607477cf3e120d04544ab8d78bcf7eff1bda06b8b0bc21232d46375407fd1810b72304fca39d3a8afe6ea031c699b6bdc8f66d189e4ffee6496ae505d4a4625e1004b2135334be9fb09d2769b447176243f183d53d1fddf3b2dedc65bb161cb1cfcbe731219f13fd58a0e37a1e3a441b1823c7d795ad14616b21b5d6a771e70d1e861a986eef651faf2611ec9eaebad2ec243079ac2f2191ae466bbcb899c73fd1d706b16e371a95e5ec6c346a817d625ddb84ec13ae6d6c43dbae25a7a35341a04e2a5fbcf09c4a451c10e024d745becabf017433ad40eb5282fcc69216971bbeff618d697a1701756b5d873a06c32f4fc685fd3fc7ee2fd2be90c1a1d7484e03ffc31edcc43b05c0b65bf05890022f28ee606f3edb5cd3b9e60c9f2ace97fd4a9bd0c1da67d7b122ab6a454a0dfdc6ea15ec38b94ad18cfd4bf4d0bc4ae8152bbdfeca5fdfbe81afead041b7eb29f349a5ba3442f8281a90a76bc307c0fc1ebf1bab20b98b2c058c0fc956fe8e3ff3904bbb3cd96f8372b3602b126f2eb762df4ae5f2a8d85e3ec7552b88c6f090d8707bb3227c8d21b23bcb7e126cedaee42eee6ddc22fc76ab6f59cb806175fcee45ee302131ff3e7404504ef885779287b808f722b8f36e2aac173ddc53cd8e7e3e22603d1488fe682324d15e87b7fda77c1e14e4be844c91f854e79747049429705a6b1094c108851f91b4a10317cd91b4c1db4e6d6c689eaac58812a6b0406e4cae53d69dfb06ebf4e84a33745eac6ac15418b1f7f0c38236429cd622a745b14c57df05feb3034026fed1e04366023a138c2ace2ecfd981176067e89396a4a69a2010564b4ab26363cfc34000de278a67c164f8465ffc8c65597ef79286c017f8c5d46beceabe494bb363d144069ef716a5385eda03e3844297cea799bc6af02d395ea0ed328f16572b2cd25f53353259744fe2e5b2c39afbf0e0398a4bcf76a67e37ccaa2d2f51b045ec8714f7ca6d32c992aabb7fe09cdfcd54c95c61fdd54e4adaad0448badf2c7998ad8e4501700d429ad9dbac97b103e025ead8641190210e446600871bd957af56fe718bc62f22808a1b6d49bdfefcdac8bc6a58fb2fb609f1f0bc770e00c73a354bf815d87f0aba1d6719d2c85c6f48ec161533092eecc9b304b0bdd5388015b478bb84860bf7068541f0a9796a960cffac4fb83209cfebe4b8966d4eed1a86508329bfb02be002fd4068d820a3c3a323b66261f8a9b62a740ab3c997aed3c49be0f4b5f8adef31dd891d02ddf1a9ab90e7bdd6446e3c843af84e6816b353f1196e8279fe12eb472ca856a766d20e8f45bd79bb163cf355930f0e90e38d2618066c394392bdf4d661d8086559f8c143b8aff7300a398bea3c71f5917289653e0c2c2e77eac4c5df235b18c76b376c4e3bc4790c576e5dac36b9c83978baad8a9b854493f473161dfc8a5430a84dc886136b5ec0844ba6c5183224647c66e25af564c3a8254efd348830231cb41299c5926870d9645026f86189852eb786d0abdad46afcca503370f3335f1bde69f998aad41a60259913b4984a13dbf7e6c6feab9a71c7cae8ca104a2166fa33ecd81162457b63e3347a8c7dce94819a2894873569f8ff482b510bebc05282df9661d704c2dfd6a63c13e16bf10537c0fcb1732cb85815cee7f4e12ad5285ebe620e16647d3e55ca0ee102c18469bb9fbd31fb0bab16f8a2b8c3c36d9bd4d2fcc067d461522f9d24d6c493dd887d40b4340cbbb5aa139921b65f687aa5be5925b52123d595d8896807fe2480008d97ddc25289108b27be3eb0e2ad9f1c7c8bc464bb9db415c1141a9ae15ddaa6b773926883b51d2863292db715396fd3b204f14c24472441c6c17d7389c7e18c88ddfbd08c327320ad82496192c1d23d261cefcb66f696a3488c9ceb5e87e6f3ba7ae5260950871c6fd08f58299dd00583c1dae4c18fab15f36ce770f2cc10f698650afb171d6d6a6b43d2fdee97f387916cddf97170ad4a9d022e24e514009c8e37cb5fac265fb04765d29d4299336c9a8ea25709a12f6c708a2f9ec3d999c132774bc8e85e998e3cfe71a5f8ee533a5c9a6f635055a16e1d0fa268e337ce11557c81d094f3c56608284b0408921cea8b5b326ddfada3738067f76e3a9a50b90dd51c79b63a92681fd6ac535f1accd6b7e479dc5198469a464dfb320685bcadbd5018fa8cc1f9fd6953c21f615325e30c017c63ac4c5504587d52a9a151ab6565349e668a307342c9b1864352bd12fa43f405581ec806fc2d04e0a71dd97b9a66aed79d45f28beb473cffa3095b123b3462b8bdbc1cbbe5dcf42c261d31dff469f038bd4fb6f47ebe28bbd4b57afc34135c7794c0b975ee33cf9409f6401188b658e3aea54c551847575251a5d8476fa85c91b4f846fa6a207cfef641dae3573882656945b54b91343b62e9af1e0b00bb665413ea5aa404f21022fc368face7cbe6c303fa95cfaa6d553af374cf0820a43502f3a7a9b6953cae645ee5648322224c57f3d10c55fb994f4ffc4f656f8907cc371a901ab7d0cdd9e58d5620af369247a1abd75d335d92f8f6bef574118180aa2070cefe14298a8e2a86b34eeba323c035892f61e678ad8a23a2021bf769be8af9bf9a5fc64bdc21b97477d2cd909221b667e13f432eaa5bb5d344bcf5f8263b03832afa184cff61c7e0f0e3f1c9bec6cb4c62c9452f0efaab416f8d0582095b4c5d046408cb303bac459c970775020f2d03d733da23608d3136cbc87d37a5a6145aa54bffad94e442b0e98cdc01da9d72ab057f636a4aafd5189421e07719037726f8f0db4f0e1bbc65a5b014a365c6617b3157b50f48d51e01843a174e5499e0347497e05cac8b7a1007755b86586f94bf1a076a0e0b1f3ba6f828d12da0c4a36194f078c675b8de13d5e92691f043951f6929a8e4cf3f73f77bb95b0bd0f1baf20188cb506d3551d9f6c395770e127ac56484541c41d5823328d02976fe662e1526c2d566d0a4f86e3c62d5053ecb04affa3cc7e6227885189f34b975850c0e180027c9996c959dcc59015aa3583f25904524e771a0c171394426c70ddb2b3a7788c7ddad9c51a45ca31ae27ab6a7c1c69d77b6c27cb68efef2af915b6917674bcbde2ff72851244f004762e3e67d336a5d213736ea94875c0bfbc80074934b2ec7c155405e76d5e25a64164a6741c0b6eded6f8967b9e061d091e427ffed6b2224b735f8deecdf0451a5b2dda748489570d9b037b40eed1ff85ee503d2fa148d0604618a7b0a058d81db7019b0062de916e091ad01e8a28d21e0e9e20854677f6a0d3e9b04f23bba87289126f293f5a597c12328a59828c698fef439ac1106226f2b2990caa63467a7abf24bc3465a0f118cbe6eb620a147c3abfbdcc175d594caa20d85b00805eb394e6b4bcd26b7d56543855c82634483307a92db5d88aff48e694e71ffdb4824882fc9face10a459d97f307b37b003b678aa74a105a0675c2653c382f4363af6c1b040237d2f8f487b1efcca52de2478fbf63f992eea005e54657e26a8b27588300db576d74fdfbdf80cf0644af9c8357f6fe62fa5b3aed51af6b8afc503ff8d08e816f6271ce13255fedaa6760023aadcdedd5873cb92fde17087451c06bfc6acc460cf9155952a0c797ebc3a402299af6242891d273d26e9e22fafb8be4e483d46844fa869cfa8d72f0c77601303cfe4ae76f5b0e2d87a3d781ddfa41fb8304bf4855c9930d01039c92934a0065d2c9078c9931066b7feff9a53342794348720fa4dec2066853ece6396dcc5340f7194944a4c4d782630e22bcaa918678d4b56d5e190edd84e1488e2859047720e60f4a1a6b850fc25cb1cbed61120202e40294dafb37c1a505188ee49e5fb894eda3b7b25c52f7b378f6044a8696fe0aa8d7a56a997d8548a55834be72ee819ebc9af070b809201b75875c5aa8cb5ef566b4061eaacc7678a3c4cc1c9356653f2f23c9a33701d9e58bd0085f603079a5f33e24fc2b3c5a725f02f18b761d99352cbb264d4d562ec845cfb51b9cd2300327d0dc5bcb9daedde2b14597b9759a9202eea216e742d038bf4501d17db644f275565977c2e3e09785953edafd1ee813fb08f30f86846bdcdd6249b53a43eb59cb0a3c873df08008279a94e5fcedf9137552cca1166680aec464097d5ff4bfd0e9bcef0ee86aa35bb4ce0431db07a9159398ababad64a4b0f8da1e3fabd4fb28340468be9a61ce6fd6a0eaafb4757cb1d9c31d167e1ec152a712951af1b038673f9ee01648818a6c6e2fbe750acc2e5a13accb473eaf80d21f710885908bec1bdd6fa303e73f968f1d991465b90d7b640d24cc9a5cf05c512e05d3ec3a0900054cd6b914ac4a27cbdb0af9cd6d3cc0d4058e13c134b3a21d8e1add6058a65ad3f50145f2b82c967dbac15329a7c59ebc5f4c6eb35b1ecf3f5627d89b2f921ccf9409b59362906f11795911e35e1f33ac39ddb87e9f43442efffe9c0f769c9eb32cbd89e47dc84e00089bdebe7ca5f93478df4515f33315a99afa0e66539b0ff30f0136b125eacfc5a84b00030bd2e48746eaec2c0c335112b6c3fb8cd5b3898610d5942eaf6cacf97a8ce7204248668e7235693b87a2ee68a1dc0b6a9fad1ab0f4520765898ec29f14ad7be806d7e9a53393dfd72f91c62e3146b1490bedd56d8331f09ffdab0d9ae1fcf6e9cd1fb4462055908a13315902152c5b711684fbdc761026b09cf0cb5888efaad804c9ed9f64046ba6b764fd841ed3bd71c37187476b0498bb99d91d3b9a146282b88c64ccc276a0018ca99d4e87daddc9b003204787be41d468613c790ccd9f7b60fcaeaf26f949e5b62c34a713523f9cb4667e93dcb383abbdc33f706b5a71fc11672714d1c6f2b6a0a4159b563663238e32c09507a8e26de5d08fe14648d8"], 0xfc8) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x200, 0x7, 0x6, 0x10001, 0x1}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) 12:19:12 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x10, 0x0, 0xfffffffd, 0x0, 0x0, 0x5f, 0x9}, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x389ac0000000, 0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='cpu&3\x0e\x00\n\xc0\xf9*`\x00OE\xd2&hIC\xff0&e\x10\xb1\x85o\x9e\xc4\xb5=\xb6\x85\x80\x14\xcem\xda\x85\x16ew\xd6\xecC\xa6\xbf\x16#\xb9\xb7;\xa2z\xc8\xca\xeb\x82\aU\x13\xb4Y\xa9LO^R\xf3\xbcM\x1c\xa2G\x87\xea4\xa1tlo|\xb2\xad\xc7~\x11\xe9:w2\xd1A\xda\x04\xb3F\xe7\xfb\xe9\xb0\xd3\'H\xed') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="73797a30c052da398307f1beae18204f1133eb6263cda717e400b4d6c46971343c837d2f37414a35b550eba360167f46c94e124d884937c6147750fbbae030e0719722c7a0f4781ab7476133543b8d7236b2e165cdca033a16a38fcc971134fc5b27316364bf7411ef55eba53ff46cd5444a2160288033e577e5e18214df184970cef6a0ee5fd3fb32b2322de217e3337382bb548ed2d3bf26b21b8a0ffc1b8ae466f49195ba8396a5d8a3ddb5d038f37e612602644ea28da02e7bb0370b5134b8a395b2ae60819440f066e85e38563aa315e1a8a7cba1aee0179d070303308ec8dfbe77f9d4ac6b581c1d64332c87e4b7ff6bb21b72b8fff8e240df60600aec95eb923bca73452725d96208a744e6e7df5086d47317e82c9a1756ca2167580eb85a5723f94e36c00e6ce9bae0cb5075cd7b99cd45e1c37885cfa7a88d319e6de7bff55a84de46ec6178a2ef5008d2ec432b23ac142a12a65f9f9c2e0591ee1736d3d07d41e324d1c2c5800804ef0395c0239abb9505789cdbb7514a4cd5327061c591a7080f7597e6a529c411d011a45bb1badccefcfbd4fc3622e3e25eb2aec721202b4dc0dcbd8efc53da7931661bd5365d33a409f411d02549a80727d92649b6bbf17678e7e1e2c49438bedc6de958214c8702c90a08af2c971d50e79160eaa64037f1e42a0ff2783d774061c68a23b2a5198b1e8256288b6c9838c87195f1d33352cd89b6875dc26860e1bf43c5c9204d1e6168ebf9a631be3b2da69be7504525780eae2b4e21fd86fcf163c607477cf3e120d04544ab8d78bcf7eff1bda06b8b0bc21232d46375407fd1810b72304fca39d3a8afe6ea031c699b6bdc8f66d189e4ffee6496ae505d4a4625e1004b2135334be9fb09d2769b447176243f183d53d1fddf3b2dedc65bb161cb1cfcbe731219f13fd58a0e37a1e3a441b1823c7d795ad14616b21b5d6a771e70d1e861a986eef651faf2611ec9eaebad2ec243079ac2f2191ae466bbcb899c73fd1d706b16e371a95e5ec6c346a817d625ddb84ec13ae6d6c43dbae25a7a35341a04e2a5fbcf09c4a451c10e024d745becabf017433ad40eb5282fcc69216971bbeff618d697a1701756b5d873a06c32f4fc685fd3fc7ee2fd2be90c1a1d7484e03ffc31edcc43b05c0b65bf05890022f28ee606f3edb5cd3b9e60c9f2ace97fd4a9bd0c1da67d7b122ab6a454a0dfdc6ea15ec38b94ad18cfd4bf4d0bc4ae8152bbdfeca5fdfbe81afead041b7eb29f349a5ba3442f8281a90a76bc307c0fc1ebf1bab20b98b2c058c0fc956fe8e3ff3904bbb3cd96f8372b3602b126f2eb762df4ae5f2a8d85e3ec7552b88c6f090d8707bb3227c8d21b23bcb7e126cedaee42eee6ddc22fc76ab6f59cb806175fcee45ee302131ff3e7404504ef885779287b808f722b8f36e2aac173ddc53cd8e7e3e22603d1488fe682324d15e87b7fda77c1e14e4be844c91f854e79747049429705a6b1094c108851f91b4a10317cd91b4c1db4e6d6c689eaac58812a6b0406e4cae53d69dfb06ebf4e84a33745eac6ac15418b1f7f0c38236429cd622a745b14c57df05feb3034026fed1e04366023a138c2ace2ecfd981176067e89396a4a69a2010564b4ab26363cfc34000de278a67c164f8465ffc8c65597ef79286c017f8c5d46beceabe494bb363d144069ef716a5385eda03e3844297cea799bc6af02d395ea0ed328f16572b2cd25f53353259744fe2e5b2c39afbf0e0398a4bcf76a67e37ccaa2d2f51b045ec8714f7ca6d32c992aabb7fe09cdfcd54c95c61fdd54e4adaad0448badf2c7998ad8e4501700d429ad9dbac97b103e025ead8641190210e446600871bd957af56fe718bc62f22808a1b6d49bdfefcdac8bc6a58fb2fb609f1f0bc770e00c73a354bf815d87f0aba1d6719d2c85c6f48ec161533092eecc9b304b0bdd5388015b478bb84860bf7068541f0a9796a960cffac4fb83209cfebe4b8966d4eed1a86508329bfb02be002fd4068d820a3c3a323b66261f8a9b62a740ab3c997aed3c49be0f4b5f8adef31dd891d02ddf1a9ab90e7bdd6446e3c843af84e6816b353f1196e8279fe12eb472ca856a766d20e8f45bd79bb163cf355930f0e90e38d2618066c394392bdf4d661d8086559f8c143b8aff7300a398bea3c71f5917289653e0c2c2e77eac4c5df235b18c76b376c4e3bc4790c576e5dac36b9c83978baad8a9b854493f473161dfc8a5430a84dc886136b5ec0844ba6c5183224647c66e25af564c3a8254efd348830231cb41299c5926870d9645026f86189852eb786d0abdad46afcca503370f3335f1bde69f998aad41a60259913b4984a13dbf7e6c6feab9a71c7cae8ca104a2166fa33ecd81162457b63e3347a8c7dce94819a2894873569f8ff482b510bebc05282df9661d704c2dfd6a63c13e16bf10537c0fcb1732cb85815cee7f4e12ad5285ebe620e16647d3e55ca0ee102c18469bb9fbd31fb0bab16f8a2b8c3c36d9bd4d2fcc067d461522f9d24d6c493dd887d40b4340cbbb5aa139921b65f687aa5be5925b52123d595d8896807fe2480008d97ddc25289108b27be3eb0e2ad9f1c7c8bc464bb9db415c1141a9ae15ddaa6b773926883b51d2863292db715396fd3b204f14c24472441c6c17d7389c7e18c88ddfbd08c327320ad82496192c1d23d261cefcb66f696a3488c9ceb5e87e6f3ba7ae5260950871c6fd08f58299dd00583c1dae4c18fab15f36ce770f2cc10f698650afb171d6d6a6b43d2fdee97f387916cddf97170ad4a9d022e24e514009c8e37cb5fac265fb04765d29d4299336c9a8ea25709a12f6c708a2f9ec3d999c132774bc8e85e998e3cfe71a5f8ee533a5c9a6f635055a16e1d0fa268e337ce11557c81d094f3c56608284b0408921cea8b5b326ddfada3738067f76e3a9a50b90dd51c79b63a92681fd6ac535f1accd6b7e479dc5198469a464dfb320685bcadbd5018fa8cc1f9fd6953c21f615325e30c017c63ac4c5504587d52a9a151ab6565349e668a307342c9b1864352bd12fa43f405581ec806fc2d04e0a71dd97b9a66aed79d45f28beb473cffa3095b123b3462b8bdbc1cbbe5dcf42c261d31dff469f038bd4fb6f47ebe28bbd4b57afc34135c7794c0b975ee33cf9409f6401188b658e3aea54c551847575251a5d8476fa85c91b4f846fa6a207cfef641dae3573882656945b54b91343b62e9af1e0b00bb665413ea5aa404f21022fc368face7cbe6c303fa95cfaa6d553af374cf0820a43502f3a7a9b6953cae645ee5648322224c57f3d10c55fb994f4ffc4f656f8907cc371a901ab7d0cdd9e58d5620af369247a1abd75d335d92f8f6bef574118180aa2070cefe14298a8e2a86b34eeba323c035892f61e678ad8a23a2021bf769be8af9bf9a5fc64bdc21b97477d2cd909221b667e13f432eaa5bb5d344bcf5f8263b03832afa184cff61c7e0f0e3f1c9bec6cb4c62c9452f0efaab416f8d0582095b4c5d046408cb303bac459c970775020f2d03d733da23608d3136cbc87d37a5a6145aa54bffad94e442b0e98cdc01da9d72ab057f636a4aafd5189421e07719037726f8f0db4f0e1bbc65a5b014a365c6617b3157b50f48d51e01843a174e5499e0347497e05cac8b7a1007755b86586f94bf1a076a0e0b1f3ba6f828d12da0c4a36194f078c675b8de13d5e92691f043951f6929a8e4cf3f73f77bb95b0bd0f1baf20188cb506d3551d9f6c395770e127ac56484541c41d5823328d02976fe662e1526c2d566d0a4f86e3c62d5053ecb04affa3cc7e6227885189f34b975850c0e180027c9996c959dcc59015aa3583f25904524e771a0c171394426c70ddb2b3a7788c7ddad9c51a45ca31ae27ab6a7c1c69d77b6c27cb68efef2af915b6917674bcbde2ff72851244f004762e3e67d336a5d213736ea94875c0bfbc80074934b2ec7c155405e76d5e25a64164a6741c0b6eded6f8967b9e061d091e427ffed6b2224b735f8deecdf0451a5b2dda748489570d9b037b40eed1ff85ee503d2fa148d0604618a7b0a058d81db7019b0062de916e091ad01e8a28d21e0e9e20854677f6a0d3e9b04f23bba87289126f293f5a597c12328a59828c698fef439ac1106226f2b2990caa63467a7abf24bc3465a0f118cbe6eb620a147c3abfbdcc175d594caa20d85b00805eb394e6b4bcd26b7d56543855c82634483307a92db5d88aff48e694e71ffdb4824882fc9face10a459d97f307b37b003b678aa74a105a0675c2653c382f4363af6c1b040237d2f8f487b1efcca52de2478fbf63f992eea005e54657e26a8b27588300db576d74fdfbdf80cf0644af9c8357f6fe62fa5b3aed51af6b8afc503ff8d08e816f6271ce13255fedaa6760023aadcdedd5873cb92fde17087451c06bfc6acc460cf9155952a0c797ebc3a402299af6242891d273d26e9e22fafb8be4e483d46844fa869cfa8d72f0c77601303cfe4ae76f5b0e2d87a3d781ddfa41fb8304bf4855c9930d01039c92934a0065d2c9078c9931066b7feff9a53342794348720fa4dec2066853ece6396dcc5340f7194944a4c4d782630e22bcaa918678d4b56d5e190edd84e1488e2859047720e60f4a1a6b850fc25cb1cbed61120202e40294dafb37c1a505188ee49e5fb894eda3b7b25c52f7b378f6044a8696fe0aa8d7a56a997d8548a55834be72ee819ebc9af070b809201b75875c5aa8cb5ef566b4061eaacc7678a3c4cc1c9356653f2f23c9a33701d9e58bd0085f603079a5f33e24fc2b3c5a725f02f18b761d99352cbb264d4d562ec845cfb51b9cd2300327d0dc5bcb9daedde2b14597b9759a9202eea216e742d038bf4501d17db644f275565977c2e3e09785953edafd1ee813fb08f30f86846bdcdd6249b53a43eb59cb0a3c873df08008279a94e5fcedf9137552cca1166680aec464097d5ff4bfd0e9bcef0ee86aa35bb4ce0431db07a9159398ababad64a4b0f8da1e3fabd4fb28340468be9a61ce6fd6a0eaafb4757cb1d9c31d167e1ec152a712951af1b038673f9ee01648818a6c6e2fbe750acc2e5a13accb473eaf80d21f710885908bec1bdd6fa303e73f968f1d991465b90d7b640d24cc9a5cf05c512e05d3ec3a0900054cd6b914ac4a27cbdb0af9cd6d3cc0d4058e13c134b3a21d8e1add6058a65ad3f50145f2b82c967dbac15329a7c59ebc5f4c6eb35b1ecf3f5627d89b2f921ccf9409b59362906f11795911e35e1f33ac39ddb87e9f43442efffe9c0f769c9eb32cbd89e47dc84e00089bdebe7ca5f93478df4515f33315a99afa0e66539b0ff30f0136b125eacfc5a84b00030bd2e48746eaec2c0c335112b6c3fb8cd5b3898610d5942eaf6cacf97a8ce7204248668e7235693b87a2ee68a1dc0b6a9fad1ab0f4520765898ec29f14ad7be806d7e9a53393dfd72f91c62e3146b1490bedd56d8331f09ffdab0d9ae1fcf6e9cd1fb4462055908a13315902152c5b711684fbdc761026b09cf0cb5888efaad804c9ed9f64046ba6b764fd841ed3bd71c37187476b0498bb99d91d3b9a146282b88c64ccc276a0018ca99d4e87daddc9b003204787be41d468613c790ccd9f7b60fcaeaf26f949e5b62c34a713523f9cb4667e93dcb383abbdc33f706b5a71fc11672714d1c6f2b6a0a4159b563663238e32c09507a8e26de5d08fe14648d8"], 0xfc8) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x200, 0x7, 0x6, 0x10001, 0x1}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) 12:19:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x8a441) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f00000001c0)={0x600, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "abb4291edede260d00f0a272134e83bbe884c41fc6faced4210500000000000000ffffff7ffff7090000000000d14704100000000000000000000113003e00", "141f420fffff00002300000e00000002000000254754d5a60000007f6e18f8000000000000000000000000000000000000000000007f6200", "0080ffffe60600ce0000000000f89e2319be455c003fac147430ffca37000c00"}) 12:19:12 executing program 0: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 1951.183366] ip_tables: iptables: counters copy to user failed while replacing table [ 1951.209830] ip_tables: iptables: counters copy to user failed while replacing table 12:19:12 executing program 5: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000001, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='auxv\x00') 12:19:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x986, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x1010000, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) 12:19:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000140)={0x6, 'sit0\x00'}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x181002, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x4, 0x4) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', 0x0, 0x7, 0x0, 0x0, 0x2040012, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x100000000}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x129401, 0x0) accept4$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget$private(0x0, 0x4) socket$inet6(0xa, 0x800000000000002, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 12:19:13 executing program 0: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 12:19:13 executing program 5: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000001, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='auxv\x00') 12:19:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x2282) [ 1951.538604] ubi0: detaching mtd0 12:19:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x2}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1951.597386] ubi0: mtd0 is detached 12:19:13 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x10, 0x0, 0xfffffffd, 0x0, 0x0, 0x5f, 0x9}, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x389ac0000000, 0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='cpu&3\x0e\x00\n\xc0\xf9*`\x00OE\xd2&hIC\xff0&e\x10\xb1\x85o\x9e\xc4\xb5=\xb6\x85\x80\x14\xcem\xda\x85\x16ew\xd6\xecC\xa6\xbf\x16#\xb9\xb7;\xa2z\xc8\xca\xeb\x82\aU\x13\xb4Y\xa9LO^R\xf3\xbcM\x1c\xa2G\x87\xea4\xa1tlo|\xb2\xad\xc7~\x11\xe9:w2\xd1A\xda\x04\xb3F\xe7\xfb\xe9\xb0\xd3\'H\xed') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xfc8) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x200, 0x7, 0x6, 0x10001, 0x1}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) [ 1951.642395] ubi0: attaching mtd0 12:19:13 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x10, 0x0, 0xfffffffd, 0x0, 0x0, 0x5f, 0x9}, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x389ac0000000, 0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='cpu&3\x0e\x00\n\xc0\xf9*`\x00OE\xd2&hIC\xff0&e\x10\xb1\x85o\x9e\xc4\xb5=\xb6\x85\x80\x14\xcem\xda\x85\x16ew\xd6\xecC\xa6\xbf\x16#\xb9\xb7;\xa2z\xc8\xca\xeb\x82\aU\x13\xb4Y\xa9LO^R\xf3\xbcM\x1c\xa2G\x87\xea4\xa1tlo|\xb2\xad\xc7~\x11\xe9:w2\xd1A\xda\x04\xb3F\xe7\xfb\xe9\xb0\xd3\'H\xed') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xfc8) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x200, 0x7, 0x6, 0x10001, 0x1}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) 12:19:13 executing program 5: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000001, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='auxv\x00') [ 1951.736615] ubi0: scanning is finished 12:19:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x8188aea6, &(0x7f0000000080)) 12:19:13 executing program 5: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000001, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='auxv\x00') [ 1951.898671] kvm [11767]: vcpu0, guest rIP: 0x13c Hyper-V uhandled wrmsr: 0x40000024 data 0x82 [ 1951.915268] kvm [11767]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000036 data 0x59 12:19:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) getsockname$tipc(r3, &(0x7f0000000200)=@name, &(0x7f0000000240)=0x10) 12:19:13 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2={0xff, 0x3}, 0x2}, 0x1c, 0x0}}], 0x1, 0x0) [ 1952.037328] kvm [11767]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000013 data 0xf1 [ 1952.197138] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1952.218211] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1952.249232] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1952.267845] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1952.277801] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1952.323095] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1952.330691] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 522216500 [ 1952.354018] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1952.363624] ubi0: background thread "ubi_bgt0d" started, PID 11807 12:19:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000140)={0x6, 'sit0\x00'}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x181002, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x4, 0x4) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', 0x0, 0x7, 0x0, 0x0, 0x2040012, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x100000000}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x129401, 0x0) accept4$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget$private(0x0, 0x4) socket$inet6(0xa, 0x800000000000002, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 12:19:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x2}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x2}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {0x8, 0x3}, {}]}, 0x3c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000040)='.//ile0\x00', 0x1000, 0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e9b752bb0b4179b3164", 0xff7c}], 0x1) [ 1952.534428] ubi0: detaching mtd0 12:19:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x2}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1952.579946] ubi0: mtd0 is detached 12:19:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYBLOB="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"], 0x0, 0x119, 0x0, 0x800000}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000003180)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x2}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x2}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000140)={0x6, 'sit0\x00'}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x181002, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x4, 0x4) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', 0x0, 0x7, 0x0, 0x0, 0x2040012, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x100000000}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x129401, 0x0) accept4$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget$private(0x0, 0x4) socket$inet6(0xa, 0x800000000000002, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 12:19:14 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x100000e, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r0, 0x127c, &(0x7f0000000040)) [ 1952.918924] ubi0: attaching mtd0 [ 1952.993809] ubi0: scanning is finished [ 1953.028366] kvm [11840]: vcpu0, guest rIP: 0x13c Hyper-V uhandled wrmsr: 0x40000024 data 0x82 [ 1953.028425] kvm [11840]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000036 data 0x59 [ 1953.028484] kvm [11840]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000013 data 0xf1 12:19:14 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x100000e, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r0, 0x127c, &(0x7f0000000040)) 12:19:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x2}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1953.231653] overlayfs: filesystem on './file0' not supported as upperdir 12:19:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {0x8, 0x3}, {}]}, 0x3c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000040)='.//ile0\x00', 0x1000, 0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e9b752bb0b4179b3164", 0xff7c}], 0x1) 12:19:15 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x100000e, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r0, 0x127c, &(0x7f0000000040)) [ 1953.525309] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1953.525356] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1953.525413] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1953.525434] ubi0: VID header offset: 64 (aligned 64), data offset: 128 12:19:15 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x100000e, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r0, 0x127c, &(0x7f0000000040)) [ 1953.568329] kvm [11865]: vcpu0, guest rIP: 0x13c Hyper-V uhandled wrmsr: 0x40000024 data 0x82 [ 1953.568393] kvm [11865]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000036 data 0x59 12:19:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {0x8, 0x3}, {}]}, 0x3c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000040)='.//ile0\x00', 0x1000, 0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') [ 1953.568450] kvm [11865]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000013 data 0xf1 [ 1953.623860] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1953.624039] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1953.624107] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 522216500 [ 1953.624167] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1953.624265] ubi0: background thread "ubi_bgt0d" started, PID 11880 12:19:17 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x93) 12:19:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000140)={0x6, 'sit0\x00'}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x181002, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x4, 0x4) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', 0x0, 0x7, 0x0, 0x0, 0x2040012, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x100000000}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x129401, 0x0) accept4$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget$private(0x0, 0x4) socket$inet6(0xa, 0x800000000000002, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 12:19:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x4b, &(0x7f0000000140)=ANY=[@ANYBLOB="a90e04000000000055125a25fc3731d9be45e75c9443ab449501000080000000003c1cf15d3b7294ff010020000000000000000000000001ff020000000000000100000000000001008000000000000000000000000000bb00000000000000000000ffffac1414aa00000000000000000000000000000001"], 0x78) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x2], [], @multicast2}}}}], 0x28}}], 0x1, 0x0) 12:19:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {0x8, 0x3}, {}]}, 0x3c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000040)='.//ile0\x00', 0x1000, 0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e9b752bb0b4179b3164", 0xff7c}], 0x1) 12:19:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {0x8, 0x3}, {}]}, 0x3c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000040)='.//ile0\x00', 0x1000, 0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:17 executing program 0: mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000700)="8452bd5d6b3272", 0x7, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0) [ 1955.900210] ubi0: detaching mtd0 [ 1955.906299] ubi0: mtd0 is detached 12:19:17 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/203, 0xcb}], 0x1) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/203, 0xcb}], 0x1) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) 12:19:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {0x8, 0x3}, {}]}, 0x3c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000040)='.//ile0\x00', 0x1000, 0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:17 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000001400)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x4, 0x4, {0x4, @vbi={0x0, 0x0, 0x7, 0x0, [], [0x9]}}}) 12:19:17 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) open$dir(0x0, 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x22, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x2) io_setup(0x0, 0x0) [ 1956.097199] vivid-001: ================= START STATUS ================= 12:19:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xffffffff}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) [ 1956.097255] vivid-001: Radio HW Seek Mode: Bounded 12:19:17 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/203, 0xcb}], 0x1) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/203, 0xcb}], 0x1) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) [ 1956.097288] vivid-001: Radio Programmable HW Seek: false [ 1956.097302] vivid-001: RDS Rx I/O Mode: Block I/O [ 1956.097316] vivid-001: Generate RBDS Instead of RDS: false [ 1956.097329] vivid-001: RDS Reception: true [ 1956.097342] vivid-001: RDS Program Type: 0 inactive [ 1956.097359] vivid-001: RDS PS Name: inactive [ 1956.097376] vivid-001: RDS Radio Text: inactive [ 1956.097392] vivid-001: RDS Traffic Announcement: false inactive [ 1956.097409] vivid-001: RDS Traffic Program: false inactive [ 1956.097425] vivid-001: RDS Music: false inactive [ 1956.097442] vivid-001: ================== END STATUS ================== [ 1956.115969] vivid-001: ================= START STATUS ================= [ 1956.116042] vivid-001: Radio HW Seek Mode: Bounded [ 1956.116058] vivid-001: Radio Programmable HW Seek: false [ 1956.116071] vivid-001: RDS Rx I/O Mode: Block I/O [ 1956.116085] vivid-001: Generate RBDS Instead of RDS: false [ 1956.116098] vivid-001: RDS Reception: true [ 1956.116112] vivid-001: RDS Program Type: 0 inactive [ 1956.116133] vivid-001: RDS PS Name: inactive [ 1956.116150] vivid-001: RDS Radio Text: inactive [ 1956.116170] vivid-001: RDS Traffic Announcement: false inactive [ 1956.116189] vivid-001: RDS Traffic Program: false inactive [ 1956.116206] vivid-001: RDS Music: false inactive [ 1956.116225] vivid-001: ================== END STATUS ================== [ 1956.119870] vivid-001: ================= START STATUS ================= [ 1956.119878] vivid-001: Radio HW Seek Mode: Bounded [ 1956.119892] vivid-001: Radio Programmable HW Seek: false [ 1956.119904] vivid-001: RDS Rx I/O Mode: Block I/O [ 1956.119917] vivid-001: Generate RBDS Instead of RDS: false [ 1956.119931] vivid-001: RDS Reception: true [ 1956.119944] vivid-001: RDS Program Type: 0 inactive [ 1956.119961] vivid-001: RDS PS Name: inactive [ 1956.119977] vivid-001: RDS Radio Text: inactive [ 1956.119993] vivid-001: RDS Traffic Announcement: false inactive [ 1956.120009] vivid-001: RDS Traffic Program: false inactive [ 1956.120024] vivid-001: RDS Music: false inactive [ 1956.120041] vivid-001: ================== END STATUS ================== [ 1956.132311] vivid-001: ================= START STATUS ================= [ 1956.132322] vivid-001: Radio HW Seek Mode: Bounded [ 1956.132337] vivid-001: Radio Programmable HW Seek: false [ 1956.132351] vivid-001: RDS Rx I/O Mode: Block I/O [ 1956.132364] vivid-001: Generate RBDS Instead of RDS: false [ 1956.132378] vivid-001: RDS Reception: true [ 1956.132392] vivid-001: RDS Program Type: 0 inactive [ 1956.132409] vivid-001: RDS PS Name: inactive [ 1956.132427] vivid-001: RDS Radio Text: inactive [ 1956.132446] vivid-001: RDS Traffic Announcement: false inactive 12:19:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}, {0x8, 0x3}, {}]}, 0x3c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000040)='.//ile0\x00', 0x1000, 0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') [ 1956.132464] vivid-001: RDS Traffic Program: false inactive [ 1956.132481] vivid-001: RDS Music: false inactive [ 1956.132501] vivid-001: ================== END STATUS ================== [ 1956.222461] audit: type=1800 audit(1587471557.931:4986): pid=11939 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=15883 res=0 [ 1956.352707] vivid-001: ================= START STATUS ================= 12:19:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e9b752bb0b4179b3164", 0xff7c}], 0x1) 12:19:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) 12:19:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000009080)={0x14, r1, 0x390c179b360adb45}, 0x14}}, 0x0) 12:19:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000100)={0x9, 0x4, 0xc, 0x3, 0x6}) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a7192ff58ab16f88b9663da5668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e543506a3bfcb79eda41d0d8dad996a06b8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9a5adffffff7f0000"], 0x10}}, 0x0) syz_open_procfs(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 12:19:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) 12:19:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, "043b6f65"}, &(0x7f0000000080)=0x28) 12:19:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 12:19:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x0, 0x0, "005be4ba6d58f637"}) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)) 12:19:19 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) open$dir(0x0, 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x22, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x2) io_setup(0x0, 0x0) 12:19:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) [ 1957.863699] vivid-001: Radio HW Seek Mode: Bounded [ 1957.882447] vivid-001: Radio Programmable HW Seek: false [ 1957.905980] vivid-001: RDS Rx I/O Mode: Block I/O [ 1957.940649] vivid-001: Generate RBDS Instead of RDS: false [ 1957.956719] vivid-001: RDS Reception: true [ 1957.969242] vivid-001: RDS Program Type: 0 inactive [ 1957.982878] vivid-001: RDS PS Name: inactive [ 1957.996020] vivid-001: RDS Radio Text: inactive [ 1958.010092] vivid-001: RDS Traffic Announcement: false inactive [ 1958.026996] vivid-001: RDS Traffic Program: false inactive [ 1958.044983] vivid-001: RDS Music: false inactive [ 1958.069690] vivid-001: ================== END STATUS ================== 12:19:19 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/203, 0xcb}], 0x1) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/203, 0xcb}], 0x1) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) 12:19:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000100)={0x9, 0x4, 0xc, 0x3, 0x6}) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a7192ff58ab16f88b9663da5668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e543506a3bfcb79eda41d0d8dad996a06b8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9a5adffffff7f0000"], 0x10}}, 0x0) syz_open_procfs(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 12:19:19 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) open$dir(0x0, 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x22, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x2) io_setup(0x0, 0x0) 12:19:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) [ 1958.165944] audit: type=1800 audit(1587471559.871:4987): pid=12000 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=15947 res=0 [ 1958.187609] vivid-001: ================= START STATUS ================= 12:19:19 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) open$dir(0x0, 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x22, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x2) io_setup(0x0, 0x0) [ 1958.250209] vivid-001: Radio HW Seek Mode: Bounded 12:19:20 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) open$dir(0x0, 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x22, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x2) io_setup(0x0, 0x0) [ 1958.306534] vivid-001: Radio Programmable HW Seek: false [ 1958.325493] audit: type=1800 audit(1587471559.931:4988): pid=12006 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16021 res=0 [ 1958.365090] vivid-001: RDS Rx I/O Mode: Block I/O 12:19:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000580)=""/53, 0x35}], 0x2, &(0x7f0000000780)}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000080)}, {0x0}, {0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="4d65bba945b56f2806b2972db163606af78fedb8968c1b9c325fe28679de70e1865e07769540a332b91ab49f3f2225b46cd6c8ac2e0854710ac5fc33da2c09ce77bc9b17d9b4c797b42abbbefbc2d1293166e5708ccab22d5af48f49cba358e413b8fdc4a16678ebc4c2185c194d106788d27313106a7000c67e6eae4d29b2ee", 0x80}, {&(0x7f00000003c0)="32d08651e8296a5fa1029f7b3cb51072fc43931fc04e372b5667b9c4eb8c2b7d095632c3de996555ea307bb6024e84a4fb0a6d223731172703b0c94981b301561515789adeb82fc749de9009518fd3dda123e4f53b37b126df5703fede8e200c30c9f6df50f4acf0d91776afee05dc427fd87907e2a9f027f8822898c1a5b8da23f394bfa3f1eeced10928c14750f59983d8bda15d930573cdfd582fae38d02d7a8134680794dc", 0xa7}], 0x6, 0x26) syz_mount_image$xfs(&(0x7f0000000680)='xfs\x00', &(0x7f0000000800)='./file0\x00', 0xff, 0x0, 0x0, 0x10000, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000008c0)={0x0, 0x3f, 0xfeff, 0x2, 0x6}, &(0x7f0000000900)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000), 0x0) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f0000000780)=0x84) r1 = socket(0x29, 0x800, 0x0) getsockopt(r1, 0x0, 0x0, 0x0, 0x0) [ 1958.423549] vivid-001: Generate RBDS Instead of RDS: false [ 1958.478800] vivid-001: RDS Reception: true 12:19:20 executing program 1: unshare(0x20400) r0 = socket$inet6(0xa, 0x2, 0x0) flock(r0, 0x8) [ 1958.500315] audit: type=1800 audit(1587471560.081:4989): pid=12019 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16056 res=0 [ 1958.544679] vivid-001: RDS Program Type: 0 inactive [ 1958.589848] vivid-001: RDS PS Name: inactive [ 1958.633312] vivid-001: RDS Radio Text: inactive [ 1958.690918] vivid-001: RDS Traffic Announcement: false inactive 12:19:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/2043], 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x15) 12:19:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000100)={0x9, 0x4, 0xc, 0x3, 0x6}) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a7192ff58ab16f88b9663da5668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e543506a3bfcb79eda41d0d8dad996a06b8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9a5adffffff7f0000"], 0x10}}, 0x0) syz_open_procfs(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) [ 1958.768115] vivid-001: RDS Traffic Program: false inactive [ 1958.778067] vivid-001: RDS Music: false inactive [ 1958.782888] vivid-001: ================== END STATUS ================== [ 1958.838195] vivid-001: ================= START STATUS ================= [ 1958.852937] vivid-001: Radio HW Seek Mode: Bounded 12:19:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000580)=""/53, 0x35}], 0x2, &(0x7f0000000780)}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000080)}, {0x0}, {0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="4d65bba945b56f2806b2972db163606af78fedb8968c1b9c325fe28679de70e1865e07769540a332b91ab49f3f2225b46cd6c8ac2e0854710ac5fc33da2c09ce77bc9b17d9b4c797b42abbbefbc2d1293166e5708ccab22d5af48f49cba358e413b8fdc4a16678ebc4c2185c194d106788d27313106a7000c67e6eae4d29b2ee", 0x80}, {&(0x7f00000003c0)="32d08651e8296a5fa1029f7b3cb51072fc43931fc04e372b5667b9c4eb8c2b7d095632c3de996555ea307bb6024e84a4fb0a6d223731172703b0c94981b301561515789adeb82fc749de9009518fd3dda123e4f53b37b126df5703fede8e200c30c9f6df50f4acf0d91776afee05dc427fd87907e2a9f027f8822898c1a5b8da23f394bfa3f1eeced10928c14750f59983d8bda15d930573cdfd582fae38d02d7a8134680794dc", 0xa7}], 0x6, 0x26) syz_mount_image$xfs(&(0x7f0000000680)='xfs\x00', &(0x7f0000000800)='./file0\x00', 0xff, 0x0, 0x0, 0x10000, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000008c0)={0x0, 0x3f, 0xfeff, 0x2, 0x6}, &(0x7f0000000900)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000), 0x0) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f0000000780)=0x84) r1 = socket(0x29, 0x800, 0x0) getsockopt(r1, 0x0, 0x0, 0x0, 0x0) [ 1958.901114] vivid-001: Radio Programmable HW Seek: false [ 1958.930098] vivid-001: RDS Rx I/O Mode: Block I/O 12:19:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/2043], 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x15) [ 1958.961763] vivid-001: Generate RBDS Instead of RDS: false [ 1959.001790] vivid-001: RDS Reception: true [ 1959.048443] vivid-001: RDS Program Type: 0 inactive [ 1959.088291] vivid-001: RDS PS Name: inactive [ 1959.117510] vivid-001: RDS Radio Text: inactive [ 1959.150972] vivid-001: RDS Traffic Announcement: false inactive [ 1959.198378] vivid-001: RDS Traffic Program: false inactive [ 1959.238108] vivid-001: RDS Music: false inactive [ 1959.243005] vivid-001: ================== END STATUS ================== 12:19:21 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) open$dir(0x0, 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x22, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x2) io_setup(0x0, 0x0) 12:19:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000580)=""/53, 0x35}], 0x2, &(0x7f0000000780)}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000080)}, {0x0}, {0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="4d65bba945b56f2806b2972db163606af78fedb8968c1b9c325fe28679de70e1865e07769540a332b91ab49f3f2225b46cd6c8ac2e0854710ac5fc33da2c09ce77bc9b17d9b4c797b42abbbefbc2d1293166e5708ccab22d5af48f49cba358e413b8fdc4a16678ebc4c2185c194d106788d27313106a7000c67e6eae4d29b2ee", 0x80}, {&(0x7f00000003c0)="32d08651e8296a5fa1029f7b3cb51072fc43931fc04e372b5667b9c4eb8c2b7d095632c3de996555ea307bb6024e84a4fb0a6d223731172703b0c94981b301561515789adeb82fc749de9009518fd3dda123e4f53b37b126df5703fede8e200c30c9f6df50f4acf0d91776afee05dc427fd87907e2a9f027f8822898c1a5b8da23f394bfa3f1eeced10928c14750f59983d8bda15d930573cdfd582fae38d02d7a8134680794dc", 0xa7}], 0x6, 0x26) syz_mount_image$xfs(&(0x7f0000000680)='xfs\x00', &(0x7f0000000800)='./file0\x00', 0xff, 0x0, 0x0, 0x10000, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000008c0)={0x0, 0x3f, 0xfeff, 0x2, 0x6}, &(0x7f0000000900)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000), 0x0) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f0000000780)=0x84) r1 = socket(0x29, 0x800, 0x0) getsockopt(r1, 0x0, 0x0, 0x0, 0x0) 12:19:21 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/203, 0xcb}], 0x1) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/203, 0xcb}], 0x1) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) 12:19:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/2043], 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x15) 12:19:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000100)={0x9, 0x4, 0xc, 0x3, 0x6}) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a7192ff58ab16f88b9663da5668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e543506a3bfcb79eda41d0d8dad996a06b8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9a5adffffff7f0000"], 0x10}}, 0x0) syz_open_procfs(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) [ 1959.407329] vivid-001: ================= START STATUS ================= [ 1959.476265] vivid-001: Radio HW Seek Mode: Bounded [ 1959.511097] vivid-001: Radio Programmable HW Seek: false [ 1959.571174] vivid-001: RDS Rx I/O Mode: Block I/O 12:19:21 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) open$dir(0x0, 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x22, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x2) io_setup(0x0, 0x0) 12:19:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/2043], 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x15) 12:19:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000580)=""/53, 0x35}], 0x2, &(0x7f0000000780)}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000080)}, {0x0}, {0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="4d65bba945b56f2806b2972db163606af78fedb8968c1b9c325fe28679de70e1865e07769540a332b91ab49f3f2225b46cd6c8ac2e0854710ac5fc33da2c09ce77bc9b17d9b4c797b42abbbefbc2d1293166e5708ccab22d5af48f49cba358e413b8fdc4a16678ebc4c2185c194d106788d27313106a7000c67e6eae4d29b2ee", 0x80}, {&(0x7f00000003c0)="32d08651e8296a5fa1029f7b3cb51072fc43931fc04e372b5667b9c4eb8c2b7d095632c3de996555ea307bb6024e84a4fb0a6d223731172703b0c94981b301561515789adeb82fc749de9009518fd3dda123e4f53b37b126df5703fede8e200c30c9f6df50f4acf0d91776afee05dc427fd87907e2a9f027f8822898c1a5b8da23f394bfa3f1eeced10928c14750f59983d8bda15d930573cdfd582fae38d02d7a8134680794dc", 0xa7}], 0x6, 0x26) syz_mount_image$xfs(&(0x7f0000000680)='xfs\x00', &(0x7f0000000800)='./file0\x00', 0xff, 0x0, 0x0, 0x10000, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000008c0)={0x0, 0x3f, 0xfeff, 0x2, 0x6}, &(0x7f0000000900)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000), 0x0) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f0000000780)=0x84) r1 = socket(0x29, 0x800, 0x0) getsockopt(r1, 0x0, 0x0, 0x0, 0x0) [ 1959.595733] audit: type=1800 audit(1587471561.301:4990): pid=12084 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=15932 res=0 [ 1959.627656] vivid-001: Generate RBDS Instead of RDS: false [ 1959.684029] vivid-001: RDS Reception: true [ 1959.724384] vivid-001: RDS Program Type: 0 inactive [ 1959.726171] audit: type=1800 audit(1587471561.431:4991): pid=12091 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16088 res=0 12:19:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) chown(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x2, 0x10000, 0x401, 0x0, 0x400}, 0x14) [ 1959.763792] vivid-001: RDS PS Name: inactive [ 1959.834485] vivid-001: RDS Radio Text: inactive [ 1959.905964] vivid-001: RDS Traffic Announcement: false inactive 12:19:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)) [ 1959.954257] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1959.971664] vivid-001: RDS Traffic Program: false inactive [ 1960.033026] vivid-001: RDS Music: false inactive 12:19:21 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1960.074226] vivid-001: ================== END STATUS ================== 12:19:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)) [ 1960.158205] vivid-001: ================= START STATUS ================= [ 1960.166891] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1960.191921] vivid-001: Radio HW Seek Mode: Bounded [ 1960.203016] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1960.236456] vivid-001: Radio Programmable HW Seek: false [ 1960.284344] vivid-001: RDS Rx I/O Mode: Block I/O [ 1960.290228] overlayfs: filesystem on './file0' not supported as upperdir [ 1960.309625] vivid-001: Generate RBDS Instead of RDS: false [ 1960.358230] vivid-001: RDS Reception: true [ 1960.362538] vivid-001: RDS Program Type: 0 inactive [ 1960.367741] vivid-001: RDS PS Name: inactive [ 1960.418055] vivid-001: RDS Radio Text: inactive [ 1960.422883] vivid-001: RDS Traffic Announcement: false inactive [ 1960.458053] vivid-001: RDS Traffic Program: false inactive [ 1960.463781] vivid-001: RDS Music: false inactive 12:19:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)) [ 1960.498074] vivid-001: ================== END STATUS ================== 12:19:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) chown(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x2, 0x10000, 0x401, 0x0, 0x400}, 0x14) 12:19:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) chown(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x2, 0x10000, 0x401, 0x0, 0x400}, 0x14) 12:19:22 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 12:19:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b2807070000000000000000000000000000000000000000000000000000000030"], 0x21) [ 1960.812007] audit: type=1800 audit(1587471562.521:4992): pid=12120 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=15729 res=0 12:19:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)) 12:19:22 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) r0 = socket(0x1000000010, 0x80003, 0x0) sendmmsg$alg(r0, &(0x7f0000000100), 0x492492492492711, 0x0) [ 1960.929089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:19:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x16}]}], {0x14}}, 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x43, 0x0) 12:19:22 executing program 4: syz_emit_ethernet(0x3c, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x88be, 0x1a, 0x0, @wg=@data={0x4, 0x0, 0x0, "14f5"}}}}}}, 0x0) 12:19:22 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1961.027179] 9pnet_virtio: no channels available for device 127.0.0.1 12:19:22 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 12:19:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008011, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) [ 1961.232401] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1961.316489] audit: type=1800 audit(1587471563.011:4993): pid=12150 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=16019 res=0 12:19:23 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 12:19:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) chown(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x2, 0x10000, 0x401, 0x0, 0x400}, 0x14) 12:19:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) chown(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x2, 0x10000, 0x401, 0x0, 0x400}, 0x14) 12:19:23 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xa) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) close(r2) r4 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4f0a, 0x0) 12:19:23 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 1961.900024] selinux_nlmsg_perm: 274 callbacks suppressed [ 1961.900037] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12169 comm=syz-executor.1 [ 1961.936925] 9pnet_virtio: no channels available for device 127.0.0.1 12:19:23 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1962.022342] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12169 comm=syz-executor.1 [ 1962.044880] audit: type=1800 audit(1587471563.751:4994): pid=12172 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=15896 res=0 [ 1962.111097] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12169 comm=syz-executor.1 12:19:23 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r0) [ 1962.184698] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12169 comm=syz-executor.1 [ 1962.298900] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1962.316434] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12169 comm=syz-executor.1 12:19:24 executing program 4: clone(0x1008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400010) 12:19:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) chown(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x2, 0x10000, 0x401, 0x0, 0x400}, 0x14) 12:19:24 executing program 4: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000200)={[0x7]}, 0x0, 0x0, 0x8) r0 = gettid() tkill(r0, 0xb) process_vm_readv(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001680)=[{&(0x7f0000001300)=""/110, 0x6e}], 0x1, 0x0) 12:19:24 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) 12:19:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) chown(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x2, 0x10000, 0x401, 0x0, 0x400}, 0x14) 12:19:24 executing program 4: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000200)={[0x7]}, 0x0, 0x0, 0x8) r0 = gettid() tkill(r0, 0xb) process_vm_readv(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001680)=[{&(0x7f0000001300)=""/110, 0x6e}], 0x1, 0x0) 12:19:24 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendfile(r0, r0, &(0x7f0000000480), 0xa198) [ 1962.812825] audit: type=1800 audit(1587471564.521:4995): pid=12201 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=15793 res=0 12:19:24 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) 12:19:24 executing program 4: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000200)={[0x7]}, 0x0, 0x0, 0x8) r0 = gettid() tkill(r0, 0xb) process_vm_readv(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001680)=[{&(0x7f0000001300)=""/110, 0x6e}], 0x1, 0x0) 12:19:24 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) 12:19:24 executing program 4: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000200)={[0x7]}, 0x0, 0x0, 0x8) r0 = gettid() tkill(r0, 0xb) process_vm_readv(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001680)=[{&(0x7f0000001300)=""/110, 0x6e}], 0x1, 0x0) 12:19:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x200}) 12:19:25 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r2, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="c7182c53a8c97ce22a448655380d43cf5f30f62f09b57201b1c6ba2038ecb2dd71186d6ed9aac3e7ded5212a", 0x2c, 0x2) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) pipe(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1963.333507] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1963.371695] 9pnet_virtio: no channels available for device 127.0.0.1 12:19:25 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 12:19:25 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) 12:19:25 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) 12:19:25 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="c4", 0x1}], 0x1, &(0x7f0000000380)=[{0x18, 0x84, 0x0, "ed"}], 0x18}, 0xfc) 12:19:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x3ef, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbmod={0x48, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x3, @random="084d1650ccd3"}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}}}]}]}, 0x60}}, 0x0) 12:19:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xca}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x8, 0xfffff8b4, 0x5, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000140)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000003440)=[{{&(0x7f00000008c0)=@caif=@dgm, 0x80, 0x0}, 0xff}, {{&(0x7f0000000b40)=@ethernet, 0x80, 0x0, 0x0, &(0x7f0000000480)=""/64, 0x40}, 0x3}, {{&(0x7f0000002d00)=@in, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000700)=""/84, 0x54}], 0x1}, 0x6}], 0x4, 0x0, 0x0) pipe(&(0x7f00000000c0)) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') preadv(r4, &(0x7f00000017c0), 0x332, 0x0) [ 1963.652480] audit: type=1800 audit(1587471565.361:4996): pid=12231 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=15722 res=0 12:19:25 executing program 4: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in6=@mcast2}, {@in=@remote, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) 12:19:25 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="c4", 0x1}], 0x1, &(0x7f0000000380)=[{0x18, 0x84, 0x0, "ed"}], 0x18}, 0xfc) 12:19:25 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) 12:19:25 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) 12:19:25 executing program 4: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in6=@mcast2}, {@in=@remote, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) 12:19:25 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="c4", 0x1}], 0x1, &(0x7f0000000380)=[{0x18, 0x84, 0x0, "ed"}], 0x18}, 0xfc) 12:19:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a41, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) kexec_load(0x0, 0x1, &(0x7f0000001400)=[{&(0x7f00000000c0)="904cad4ee2dafac28f4e20096dde08ec08fa0a376f62b5fce3d25b8b04c3dbec2882849ce5ea8968c6d63d", 0x2b, 0x7, 0x2}], 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) sendto$rose(0xffffffffffffffff, &(0x7f0000001280)="9e6efb73f4ab182b472ff3c4b7d98d2866505cad933948420a9d5067166ee020bc75b7adf7b801e4bc694a194284328bf0963ed15bd1b7ce00b70275f2857299fbd441411b1f801a63fc0380d5f24b0ecbb175b187e19f119f2a1515688820c647768f2a898997140c35be2bc3c1b693307e31c8dd3dda41ca89a23f2153d577a2922d28400b149509bf", 0x8a, 0x40, &(0x7f0000001340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000013c0)=0x14) 12:19:25 executing program 4: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in6=@mcast2}, {@in=@remote, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) 12:19:25 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="c4", 0x1}], 0x1, &(0x7f0000000380)=[{0x18, 0x84, 0x0, "ed"}], 0x18}, 0xfc) 12:19:26 executing program 4: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in6=@mcast2}, {@in=@remote, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) 12:19:26 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) msgget$private(0x0, 0x100) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000000011, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:19:26 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) read$char_usb(r0, 0x0, 0x0) 12:19:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3f4d1fda08f90c432c9fe2d4c81102743bd8b543fe7d3afa17982a53bc7787e41dd16e20594e625d7eb8d933de62eeed8445db843118cadd10536de8884653d3963c27d63335ddce", @ANYRESHEX=0x0, @ANYPTR64, @ANYRESDEC, @ANYPTR64, @ANYRES64], 0x0, 0x86}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:26 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) tee(r0, r2, 0x5, 0x2) 12:19:26 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38fff7c63daabfae85cb91750b5ff7cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c9", 0xbe}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 12:19:26 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) msgget$private(0x0, 0x100) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000000011, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:19:26 executing program 1: getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0xe00) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) fallocate(r0, 0x0, 0x7, 0x10000) sendfile(r0, r1, 0x0, 0x11f08) [ 1964.771060] warning: process `syz-executor.1' used the obsolete bdflush system call [ 1964.793371] Fix your initscripts? 12:19:26 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x1f0) [ 1964.828993] ptrace attach of "/root/syz-executor.5"[12294] was attempted by "/root/syz-executor.5"[12299] [ 1964.991236] audit: type=1800 audit(1587471566.701:4997): pid=12307 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=15793 res=0 [ 1965.017056] xt_AUDIT: Audit type out of range (valid range: 0..2) 12:19:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a41, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) kexec_load(0x0, 0x1, &(0x7f0000001400)=[{&(0x7f00000000c0)="904cad4ee2dafac28f4e20096dde08ec08fa0a376f62b5fce3d25b8b04c3dbec2882849ce5ea8968c6d63d", 0x2b, 0x7, 0x2}], 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) sendto$rose(0xffffffffffffffff, &(0x7f0000001280)="9e6efb73f4ab182b472ff3c4b7d98d2866505cad933948420a9d5067166ee020bc75b7adf7b801e4bc694a194284328bf0963ed15bd1b7ce00b70275f2857299fbd441411b1f801a63fc0380d5f24b0ecbb175b187e19f119f2a1515688820c647768f2a898997140c35be2bc3c1b693307e31c8dd3dda41ca89a23f2153d577a2922d28400b149509bf", 0x8a, 0x40, &(0x7f0000001340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000013c0)=0x14) 12:19:26 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) msgget$private(0x0, 0x100) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000000011, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:19:26 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x1f0) 12:19:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x181, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/245, 0xf5}], 0x1}, 0x5}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) [ 1965.070160] audit: type=1804 audit(1587471566.721:4998): pid=12307 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir308717137/syzkaller.n4CTkz/620/file0" dev="sda1" ino=15793 res=1 12:19:26 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x1f0) [ 1965.156429] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1965.232882] xt_AUDIT: Audit type out of range (valid range: 0..2) 12:19:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) syz_open_dev$audion(0x0, 0x8, 0x8200) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'nr0\x00', 0x100}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) 12:19:27 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x1f0) 12:19:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x181, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/245, 0xf5}], 0x1}, 0x5}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) 12:19:27 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) msgget$private(0x0, 0x100) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000000011, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:19:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a41, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) kexec_load(0x0, 0x1, &(0x7f0000001400)=[{&(0x7f00000000c0)="904cad4ee2dafac28f4e20096dde08ec08fa0a376f62b5fce3d25b8b04c3dbec2882849ce5ea8968c6d63d", 0x2b, 0x7, 0x2}], 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) sendto$rose(0xffffffffffffffff, &(0x7f0000001280)="9e6efb73f4ab182b472ff3c4b7d98d2866505cad933948420a9d5067166ee020bc75b7adf7b801e4bc694a194284328bf0963ed15bd1b7ce00b70275f2857299fbd441411b1f801a63fc0380d5f24b0ecbb175b187e19f119f2a1515688820c647768f2a898997140c35be2bc3c1b693307e31c8dd3dda41ca89a23f2153d577a2922d28400b149509bf", 0x8a, 0x40, &(0x7f0000001340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000013c0)=0x14) [ 1965.658664] xt_AUDIT: Audit type out of range (valid range: 0..2) 12:19:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a41, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) kexec_load(0x0, 0x1, &(0x7f0000001400)=[{&(0x7f00000000c0)="904cad4ee2dafac28f4e20096dde08ec08fa0a376f62b5fce3d25b8b04c3dbec2882849ce5ea8968c6d63d", 0x2b, 0x7, 0x2}], 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) sendto$rose(0xffffffffffffffff, &(0x7f0000001280)="9e6efb73f4ab182b472ff3c4b7d98d2866505cad933948420a9d5067166ee020bc75b7adf7b801e4bc694a194284328bf0963ed15bd1b7ce00b70275f2857299fbd441411b1f801a63fc0380d5f24b0ecbb175b187e19f119f2a1515688820c647768f2a898997140c35be2bc3c1b693307e31c8dd3dda41ca89a23f2153d577a2922d28400b149509bf", 0x8a, 0x40, &(0x7f0000001340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000013c0)=0x14) 12:19:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="035000000000000008000a00", @ANYRES32, @ANYBLOB="1800120008000100707070000c00020008000100", @ANYRES32=r1, @ANYBLOB="bb0100a18a"], 0x40}}, 0x0) 12:19:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a41, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) kexec_load(0x0, 0x1, &(0x7f0000001400)=[{&(0x7f00000000c0)="904cad4ee2dafac28f4e20096dde08ec08fa0a376f62b5fce3d25b8b04c3dbec2882849ce5ea8968c6d63d", 0x2b, 0x7, 0x2}], 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) sendto$rose(0xffffffffffffffff, &(0x7f0000001280)="9e6efb73f4ab182b472ff3c4b7d98d2866505cad933948420a9d5067166ee020bc75b7adf7b801e4bc694a194284328bf0963ed15bd1b7ce00b70275f2857299fbd441411b1f801a63fc0380d5f24b0ecbb175b187e19f119f2a1515688820c647768f2a898997140c35be2bc3c1b693307e31c8dd3dda41ca89a23f2153d577a2922d28400b149509bf", 0x8a, 0x40, &(0x7f0000001340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000013c0)=0x14) 12:19:27 executing program 2: sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000028c0)="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", 0x26d}], 0x1}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) 12:19:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a41, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) kexec_load(0x0, 0x1, &(0x7f0000001400)=[{&(0x7f00000000c0)="904cad4ee2dafac28f4e20096dde08ec08fa0a376f62b5fce3d25b8b04c3dbec2882849ce5ea8968c6d63d", 0x2b, 0x7, 0x2}], 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) sendto$rose(0xffffffffffffffff, &(0x7f0000001280)="9e6efb73f4ab182b472ff3c4b7d98d2866505cad933948420a9d5067166ee020bc75b7adf7b801e4bc694a194284328bf0963ed15bd1b7ce00b70275f2857299fbd441411b1f801a63fc0380d5f24b0ecbb175b187e19f119f2a1515688820c647768f2a898997140c35be2bc3c1b693307e31c8dd3dda41ca89a23f2153d577a2922d28400b149509bf", 0x8a, 0x40, &(0x7f0000001340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000013c0)=0x14) 12:19:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x181, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/245, 0xf5}], 0x1}, 0x5}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) 12:19:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x0, 0x1}) 12:19:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 12:19:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="035000000000000008000a00", @ANYRES32, @ANYBLOB="1800120008000100707070000c00020008000100", @ANYRES32=r1, @ANYBLOB="bb0100a18a"], 0x40}}, 0x0) 12:19:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x181, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/245, 0xf5}], 0x1}, 0x5}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) 12:19:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) syz_open_dev$audion(0x0, 0x8, 0x8200) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'nr0\x00', 0x100}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) 12:19:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x0, 0x1}) 12:19:28 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc33760036e42a7fb4aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b610a", 0x3b}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x20, r1, 0x0, 0x0) 12:19:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x0, 0x1}) 12:19:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a41, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) kexec_load(0x0, 0x1, &(0x7f0000001400)=[{&(0x7f00000000c0)="904cad4ee2dafac28f4e20096dde08ec08fa0a376f62b5fce3d25b8b04c3dbec2882849ce5ea8968c6d63d", 0x2b, 0x7, 0x2}], 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) sendto$rose(0xffffffffffffffff, &(0x7f0000001280)="9e6efb73f4ab182b472ff3c4b7d98d2866505cad933948420a9d5067166ee020bc75b7adf7b801e4bc694a194284328bf0963ed15bd1b7ce00b70275f2857299fbd441411b1f801a63fc0380d5f24b0ecbb175b187e19f119f2a1515688820c647768f2a898997140c35be2bc3c1b693307e31c8dd3dda41ca89a23f2153d577a2922d28400b149509bf", 0x8a, 0x40, &(0x7f0000001340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000013c0)=0x14) 12:19:28 executing program 4: r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x67) memfd_create(&(0x7f00000000c0)='vboxnet0\x00', 0x0) fsync(r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x204440, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) 12:19:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x0, 0x1}) 12:19:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="035000000000000008000a00", @ANYRES32, @ANYBLOB="1800120008000100707070000c00020008000100", @ANYRES32=r1, @ANYBLOB="bb0100a18a"], 0x40}}, 0x0) 12:19:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x4000000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x8, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12:19:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYPTR, @ANYRES16, @ANYBLOB="838dc3bcb5516d4593d0473bfb5c1c6b62b3256f21ea83ae0e4d6db3fa06669dd1476fc1943cca9dca93b9c2e2fbe96769f85dc930788eb6be14a451accddd0c15c8a12bc635c902edafeec9deae"], 0x0, 0x60, 0x0, 0x400000}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="035000000000000008000a00", @ANYRES32, @ANYBLOB="1800120008000100707070000c00020008000100", @ANYRES32=r1, @ANYBLOB="bb0100a18a"], 0x40}}, 0x0) [ 1967.289741] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1967.377872] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1967.439713] CPU: 0 PID: 12421 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 1967.447662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.457054] Call Trace: [ 1967.459776] dump_stack+0x13e/0x194 [ 1967.463444] warn_alloc.cold+0x96/0x1af [ 1967.467435] ? zone_watermark_ok_safe+0x280/0x280 [ 1967.473486] ? wait_for_completion+0x390/0x390 [ 1967.478198] __alloc_pages_slowpath+0x2114/0x26c0 [ 1967.483080] ? warn_alloc+0xf0/0xf0 [ 1967.486725] ? find_held_lock+0x2d/0x110 [ 1967.490815] ? fs_reclaim_acquire+0x10/0x10 [ 1967.495191] __alloc_pages_nodemask+0x5d3/0x700 [ 1967.499879] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1967.504943] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1967.509944] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1967.514990] alloc_pages_current+0xe7/0x1e0 [ 1967.519335] kvm_mmu_create+0xd1/0x1c0 [ 1967.523243] kvm_arch_vcpu_init+0x28b/0x8b0 [ 1967.527577] ? alloc_pages_current+0xef/0x1e0 [ 1967.532100] kvm_vcpu_init+0x26d/0x360 [ 1967.536184] vmx_create_vcpu+0xf3/0x2900 [ 1967.540506] ? __mutex_unlock_slowpath+0x75/0x780 [ 1967.545782] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 1967.550841] ? handle_rdmsr+0x6b0/0x6b0 [ 1967.554834] kvm_vm_ioctl+0x49c/0x1430 [ 1967.558756] ? __lock_acquire+0x5f7/0x4620 [ 1967.563210] ? kvm_vcpu_release+0xa0/0xa0 [ 1967.567378] ? check_preemption_disabled+0x35/0x240 [ 1967.572418] ? perf_trace_lock+0x109/0x4b0 [ 1967.576980] ? check_preemption_disabled+0x35/0x240 [ 1967.582104] ? perf_trace_lock+0x109/0x4b0 [ 1967.586515] ? save_trace+0x290/0x290 [ 1967.591484] ? SOFTIRQ_verbose+0x10/0x10 [ 1967.595786] ? kvm_vcpu_release+0xa0/0xa0 [ 1967.599978] do_vfs_ioctl+0x75a/0xfe0 [ 1967.605003] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1967.610261] ? ioctl_preallocate+0x1a0/0x1a0 [ 1967.615077] ? security_file_ioctl+0x76/0xb0 [ 1967.619951] ? security_file_ioctl+0x83/0xb0 [ 1967.624412] SyS_ioctl+0x7f/0xb0 [ 1967.627838] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1967.631833] do_syscall_64+0x1d5/0x640 [ 1967.635749] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1967.640966] RIP: 0033:0x45c829 [ 1967.644251] RSP: 002b:00007f615e1f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1967.652107] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 1967.659393] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 1967.666863] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1967.674701] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1967.681992] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f615e1f76d4 12:19:29 executing program 4: r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x67) memfd_create(&(0x7f00000000c0)='vboxnet0\x00', 0x0) fsync(r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x204440, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) 12:19:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) syz_open_dev$audion(0x0, 0x8, 0x8200) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'nr0\x00', 0x100}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) [ 1967.783406] Mem-Info: [ 1967.786158] active_anon:568614 inactive_anon:181590 isolated_anon:0 [ 1967.786158] active_file:32834 inactive_file:50475 isolated_file:0 [ 1967.786158] unevictable:7713 dirty:144 writeback:0 unstable:0 [ 1967.786158] slab_reclaimable:18533 slab_unreclaimable:135650 [ 1967.786158] mapped:66364 shmem:12031 pagetables:20646 bounce:0 [ 1967.786158] free:498013 free_pcp:604 free_cma:0 [ 1968.051620] Node 0 active_anon:1421868kB inactive_anon:381864kB active_file:252kB inactive_file:260kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 12:19:29 executing program 5: r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x67) memfd_create(&(0x7f00000000c0)='vboxnet0\x00', 0x0) fsync(r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x204440, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) [ 1968.193609] Node 1 active_anon:855436kB inactive_anon:344496kB active_file:131016kB inactive_file:201736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34880kB dirty:620kB writeback:0kB shmem:10408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 12:19:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/135, 0x75}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000000)) 12:19:30 executing program 4: r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x67) memfd_create(&(0x7f00000000c0)='vboxnet0\x00', 0x0) fsync(r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x204440, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) 12:19:30 executing program 5: r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x67) memfd_create(&(0x7f00000000c0)='vboxnet0\x00', 0x0) fsync(r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x204440, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) [ 1968.433630] Node 0 DMA free:10400kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 12:19:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/135, 0x75}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000000)) [ 1968.629740] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1968.684441] Node 0 DMA32 free:35552kB min:36272kB low:45340kB high:54408kB active_anon:1421868kB inactive_anon:380556kB active_file:252kB inactive_file:260kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16544kB pagetables:55444kB bounce:0kB free_pcp:776kB local_pcp:620kB free_cma:0kB 12:19:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) syz_open_dev$audion(0x0, 0x8, 0x8200) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'nr0\x00', 0x100}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) [ 1968.866587] lowmem_reserve[]: 0 0 0 0 0 [ 1968.871286] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 12:19:30 executing program 5: r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x67) memfd_create(&(0x7f00000000c0)='vboxnet0\x00', 0x0) fsync(r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x204440, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) [ 1969.018158] lowmem_reserve[]: 0 0 0 0 0 [ 1969.022246] Node 1 Normal free:1949212kB min:53612kB low:67012kB high:80412kB active_anon:852672kB inactive_anon:344496kB active_file:131016kB inactive_file:200732kB unevictable:0kB writepending:632kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15456kB pagetables:27052kB bounce:0kB free_pcp:1344kB local_pcp:660kB free_cma:0kB [ 1969.198116] lowmem_reserve[]: 0 0 0 0 0 [ 1969.218218] Node 0 DMA: 6*4kB (UMEH) 5*8kB (UE) 6*16kB (UEH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10400kB [ 1969.278740] Node 0 DMA32: 1166*4kB (UMEH) 1113*8kB (UME) 809*16kB (UME) 135*32kB (UME) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 35312kB [ 1969.336497] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1969.378379] Node 1 Normal: 1*4kB (U) 7*8kB (UME) 136*16kB (UE) 59*32kB (UME) 77*64kB (UME) 69*128kB (UME) 90*256kB (UME) 72*512kB (UME) 20*1024kB (UME) 1*2048kB (U) 450*4096kB (UM) = 1943516kB [ 1969.433756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1969.478103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1969.486802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1969.524045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1969.558200] 93338 total pagecache pages [ 1969.562258] 0 pages in swap cache [ 1969.565756] Swap cache stats: add 0, delete 0, find 0/0 [ 1969.585017] Free swap = 0kB [ 1969.604386] Total swap = 0kB [ 1969.607508] 1965979 pages RAM [ 1969.623947] 0 pages HighMem/MovableOnly [ 1969.629237] 339050 pages reserved [ 1969.632715] 0 pages cma reserved 12:19:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$uid(0x3, 0x0) 12:19:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYPTR, @ANYRES16, @ANYBLOB="838dc3bcb5516d4593d0473bfb5c1c6b62b3256f21ea83ae0e4d6db3fa06669dd1476fc1943cca9dca93b9c2e2fbe96769f85dc930788eb6be14a451accddd0c15c8a12bc635c902edafeec9deae"], 0x0, 0x60, 0x0, 0x400000}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:31 executing program 4: r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x67) memfd_create(&(0x7f00000000c0)='vboxnet0\x00', 0x0) fsync(r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x204440, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) 12:19:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/135, 0x75}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000000)) 12:19:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x1b}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) 12:19:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$uid(0x3, 0x0) 12:19:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="24000000200007021dfffd946f610500020000171f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4f}], 0x1}, 0x0) 12:19:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$uid(0x3, 0x0) 12:19:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/135, 0x75}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000000)) 12:19:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$uid(0x3, 0x0) [ 1970.464361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1970.488835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 12:19:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000003c0)) 12:19:32 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x7fffffff, 0x100}}) 12:19:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) 12:19:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYPTR, @ANYRES16, @ANYBLOB="838dc3bcb5516d4593d0473bfb5c1c6b62b3256f21ea83ae0e4d6db3fa06669dd1476fc1943cca9dca93b9c2e2fbe96769f85dc930788eb6be14a451accddd0c15c8a12bc635c902edafeec9deae"], 0x0, 0x60, 0x0, 0x400000}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}], {}, {0x20, 0x4}}, 0x2c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) setuid(0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:34 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64], 0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) getpeername$llc(r2, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x1) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8020003) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x0, 0x7]) 12:19:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=0x0}) 12:19:34 executing program 1: clone(0x80008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() select(0x80c9, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x5, 0x0, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100e98b0467883bbb31090e00005dbf5300d1bdfa17c061f60996044706c63500fb9d8d36115c00f4040518f300000000000a00000002e6"], 0x39}}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:34 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:19:35 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 12:19:35 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:19:35 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:19:35 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {0xfffffffc}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}) r1 = dup(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000100)) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0xe3}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4805}, 0x20000) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000100)=0xee) ioctl$KDADDIO(r3, 0x4b34, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) semctl$IPC_RMID(0x0, 0x0, 0x0) 12:19:35 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:19:35 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) [ 1973.663439] overlayfs: filesystem on './file0' not supported as upperdir 12:19:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYPTR, @ANYRES16, @ANYBLOB="838dc3bcb5516d4593d0473bfb5c1c6b62b3256f21ea83ae0e4d6db3fa06669dd1476fc1943cca9dca93b9c2e2fbe96769f85dc930788eb6be14a451accddd0c15c8a12bc635c902edafeec9deae"], 0x0, 0x60, 0x0, 0x400000}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:38 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:19:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}], {}, {0x20, 0x4}}, 0x2c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) setuid(0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}], {}, {0x20, 0x4}}, 0x2c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) setuid(0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:38 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:19:38 executing program 1: clone(0x80008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() select(0x80c9, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x5, 0x0, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100e98b0467883bbb31090e00005dbf5300d1bdfa17c061f60996044706c63500fb9d8d36115c00f4040518f300000000000a00000002e6"], 0x39}}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}], {}, {0x20, 0x4}}, 0x2c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) setuid(0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:38 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 12:19:38 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 12:19:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}], {}, {0x20, 0x4}}, 0x2c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) setuid(0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}], {}, {0x20, 0x4}}, 0x2c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) setuid(0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}], {}, {0x20, 0x4}}, 0x2c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) setuid(0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}], {}, {0x20, 0x4}}, 0x2c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) setuid(0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}], {}, {0x20, 0x4}}, 0x2c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) setuid(0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:41 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 12:19:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x5}, [{}], {}, {0x20, 0x4}}, 0x2c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) setuid(0x0) socket(0x0, 0x0, 0x1f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 12:19:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000540), 0x4) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:19:41 executing program 1: clone(0x80008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() select(0x80c9, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x5, 0x0, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100e98b0467883bbb31090e00005dbf5300d1bdfa17c061f60996044706c63500fb9d8d36115c00f4040518f300000000000a00000002e6"], 0x39}}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000540), 0x4) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:19:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000540), 0x4) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:19:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000540), 0x4) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:19:41 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x80}, 'port1\x00'}) 12:19:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000073c7cb6b480005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x45}}, 0x0) 12:19:41 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000180)={{0x0, 0x7}}) 12:19:42 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$getownex(r0, 0x11, 0x0) 12:19:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 12:19:42 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 12:19:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mbind(&(0x7f00000bd000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) 12:19:42 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x80}, 'port1\x00'}) 12:19:44 executing program 1: clone(0x80008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() select(0x80c9, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x5, 0x0, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100e98b0467883bbb31090e00005dbf5300d1bdfa17c061f60996044706c63500fb9d8d36115c00f4040518f300000000000a00000002e6"], 0x39}}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000073c7cb6b480005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x45}}, 0x0) 12:19:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000073c7cb6b480005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x45}}, 0x0) 12:19:44 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x80}, 'port1\x00'}) 12:19:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 12:19:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 12:19:44 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x80}, 'port1\x00'}) 12:19:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 12:19:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000073c7cb6b480005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x45}}, 0x0) 12:19:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000073c7cb6b480005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x45}}, 0x0) 12:19:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000073c7cb6b480005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x45}}, 0x0) 12:19:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000073c7cb6b480005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1fffffc}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x45}}, 0x0) 12:19:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f0000000300), 0xa, 0x0, 0x0, 0x0, 0x1) 12:19:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 12:19:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 12:19:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 12:19:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4}}, 0x1c}}, 0x0) 12:19:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 12:19:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 12:19:47 executing program 1: r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x1) 12:19:47 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140), 0xc) 12:19:47 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000f5ff0000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000dfff0000000000000000180000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001500000000000000100073397a5f74756e00001000000000000079615330000000000000000000000000b76f6e645f736c6176655f310000000073697430000000002000000000000000aaaaaaaaaa0000000000feff0080c20000000000000000000000e8000000e8000000180100006c696d6974000000000000000000000002000000000000000000000000000000200000000000000000f9ff210000000500000000000000003830325f330080000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000b827d85034bb5ec6a300000200000000000000000000000000000000000000000000166d668100000000000000000000000000000010000000000000"]}, 0x220) 12:19:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x560, 0xffffffff, 0x300, 0x300, 0x3a0, 0xffffffff, 0xffffffff, 0x4c8, 0x4c8, 0x4c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230, 'bpf\x00'}, {0x25}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@remote, @remote, 0x0, 0x0, 'gretap0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'veth1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c0) 12:19:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) removexattr(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00') [ 1985.996393] ebt_limit: overflow, try lower: 570423552/83886080 [ 1986.001725] bpf: check failed: parse error [ 1986.036908] ebt_limit: overflow, try lower: 570423552/83886080 12:19:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x60, 0x1, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x60}}, 0x0) [ 1986.206447] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:19:48 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) 12:19:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 12:19:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 12:19:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpriority(0x1, 0x0) 12:19:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x0, 0x2}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:19:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) [ 1986.521633] IPVS: Error connecting to the multicast addr 12:19:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000001440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 1986.728828] IPVS: Error connecting to the multicast addr 12:19:48 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) 12:19:48 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) [ 1987.076301] IPVS: Error connecting to the multicast addr 12:19:48 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 12:19:48 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) 12:19:48 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) 12:19:48 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) chdir(0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x3cd, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020013f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 12:19:49 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) 12:19:49 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) 12:19:49 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 12:19:51 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) chdir(0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x3cd, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020013f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 12:19:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e9, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 12:19:51 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 12:19:51 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) chdir(0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x3cd, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020013f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 12:19:51 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) chdir(0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x3cd, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020013f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 12:19:51 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) chdir(0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x3cd, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020013f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 12:19:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e9, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 12:19:51 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 12:19:51 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) chdir(0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x3cd, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020013f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 12:19:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e9, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 12:19:51 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) chdir(0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x3cd, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020013f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 12:19:51 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) chdir(0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x3cd, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020013f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 12:19:51 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x10012, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x800455d1, &(0x7f0000000100)=""/11) 12:19:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e9, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 12:19:51 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) chdir(0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x3cd, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020013f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 12:19:52 executing program 5: r0 = socket(0x1, 0x803, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 12:19:52 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) creat(0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e, 0x0, 0x10400}}, 0x50) read$FUSE(r0, &(0x7f0000001780), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002840)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) 12:19:52 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) chdir(0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x3cd, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020013f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 12:19:52 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aaf0279d"], 0x0, 0x20}, 0x20) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 12:19:52 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) chdir(0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x3cd, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020013f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 12:19:52 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) chdir(0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x3cd, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020013f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 12:19:52 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0xffffff4d, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000064c0), 0x4000000000000a6, 0x2, 0x0) 12:19:52 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) chdir(0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x3cd, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020013f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 12:19:52 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000), 0x4) 12:19:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010100000000000000287a0000000500010003000001"], 0x1c}}, 0x0) 12:19:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="f2"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) 12:19:53 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000), 0x4) 12:19:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) 12:19:53 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000), 0x4) [ 1991.490875] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1991.559778] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1991.577183] CPU: 0 PID: 13042 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 1991.585379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.594748] Call Trace: [ 1991.597353] dump_stack+0x13e/0x194 [ 1991.600993] warn_alloc.cold+0x96/0x1af [ 1991.604986] ? zone_watermark_ok_safe+0x280/0x280 [ 1991.609858] ? wait_for_completion+0x390/0x390 [ 1991.614461] __alloc_pages_slowpath+0x2114/0x26c0 [ 1991.619362] ? warn_alloc+0xf0/0xf0 [ 1991.623005] ? find_held_lock+0x2d/0x110 [ 1991.627081] ? fs_reclaim_acquire+0x10/0x10 [ 1991.631430] __alloc_pages_nodemask+0x5d3/0x700 [ 1991.636117] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1991.641149] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1991.646015] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1991.651068] alloc_pages_current+0xe7/0x1e0 [ 1991.655411] kvm_mmu_create+0xd1/0x1c0 [ 1991.659317] kvm_arch_vcpu_init+0x28b/0x8b0 [ 1991.663653] ? alloc_pages_current+0xef/0x1e0 [ 1991.668172] kvm_vcpu_init+0x26d/0x360 [ 1991.672081] vmx_create_vcpu+0xf3/0x2900 [ 1991.676320] ? __mutex_unlock_slowpath+0x75/0x780 [ 1991.681204] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 1991.686333] ? handle_rdmsr+0x6b0/0x6b0 [ 1991.690329] kvm_vm_ioctl+0x49c/0x1430 [ 1991.694230] ? __lock_acquire+0x5f7/0x4620 [ 1991.698479] ? kvm_vcpu_release+0xa0/0xa0 [ 1991.702643] ? check_preemption_disabled+0x35/0x240 [ 1991.707672] ? perf_trace_lock+0x109/0x4b0 [ 1991.711917] ? check_preemption_disabled+0x35/0x240 [ 1991.716965] ? perf_trace_lock+0x109/0x4b0 [ 1991.721211] ? save_trace+0x290/0x290 [ 1991.725020] ? SOFTIRQ_verbose+0x10/0x10 [ 1991.729095] ? kvm_vcpu_release+0xa0/0xa0 [ 1991.733263] do_vfs_ioctl+0x75a/0xfe0 [ 1991.737085] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1991.741858] ? ioctl_preallocate+0x1a0/0x1a0 [ 1991.746299] ? security_file_ioctl+0x76/0xb0 [ 1991.750730] ? security_file_ioctl+0x83/0xb0 [ 1991.755165] SyS_ioctl+0x7f/0xb0 [ 1991.758588] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1991.762595] do_syscall_64+0x1d5/0x640 [ 1991.766531] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1991.771737] RIP: 0033:0x45c829 [ 1991.774941] RSP: 002b:00007fd87d523c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1991.782671] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 1991.789957] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 1991.797238] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1991.804516] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1991.811795] R13: 0000000000000390 R14: 00000000004c605c R15: 00007fd87d5246d4 [ 1991.832140] Mem-Info: [ 1991.834760] active_anon:568574 inactive_anon:181591 isolated_anon:0 [ 1991.834760] active_file:32831 inactive_file:50486 isolated_file:0 [ 1991.834760] unevictable:7713 dirty:212 writeback:0 unstable:0 [ 1991.834760] slab_reclaimable:17212 slab_unreclaimable:129807 [ 1991.834760] mapped:66380 shmem:12030 pagetables:20663 bounce:0 [ 1991.834760] free:505104 free_pcp:608 free_cma:0 [ 1991.899785] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:232kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1991.929361] Node 1 active_anon:852688kB inactive_anon:344500kB active_file:131072kB inactive_file:201712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34832kB dirty:808kB writeback:0kB shmem:10404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1991.995553] Node 0 DMA free:10304kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1992.030556] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1992.036198] Node 0 DMA32 free:27752kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:232kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16544kB pagetables:55444kB bounce:0kB free_pcp:1172kB local_pcp:652kB free_cma:0kB [ 1992.081743] lowmem_reserve[]: 0 0 0 0 0 [ 1992.085993] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1992.124545] lowmem_reserve[]: 0 0 0 0 0 [ 1992.128995] Node 1 Normal free:1982576kB min:53612kB low:67012kB high:80412kB active_anon:852668kB inactive_anon:344492kB active_file:131084kB inactive_file:201712kB unevictable:0kB writepending:840kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15456kB pagetables:26960kB bounce:0kB free_pcp:1276kB local_pcp:584kB free_cma:0kB [ 1992.163577] lowmem_reserve[]: 0 0 0 0 0 [ 1992.167844] Node 0 DMA: 4*4kB (UMEH) 2*8kB (UE) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10304kB [ 1992.191944] Node 0 DMA32: 3357*4kB (UMEH) 772*8kB (UMEH) 177*16kB (UMEH) 43*32kB (MH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 28292kB [ 1992.212059] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1992.226518] Node 1 Normal: 240*4kB (UME) 90*8kB (UME) 268*16kB (UME) 465*32kB (UME) 288*64kB (UME) 100*128kB (UME) 118*256kB (UME) 73*512kB (UME) 19*1024kB (UE) 2*2048kB (UM) 449*4096kB (UM) = 1982320kB [ 1992.252494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1992.263954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1992.277588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1992.289540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1992.302961] 93337 total pagecache pages [ 1992.307624] 0 pages in swap cache [ 1992.313721] Swap cache stats: add 0, delete 0, find 0/0 [ 1992.323887] Free swap = 0kB [ 1992.327072] Total swap = 0kB [ 1992.332729] 1965979 pages RAM [ 1992.336006] 0 pages HighMem/MovableOnly [ 1992.344612] 339050 pages reserved [ 1992.351516] 0 pages cma reserved [ 1992.589815] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1992.607532] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1992.614389] CPU: 0 PID: 13010 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 1992.622726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.632098] Call Trace: [ 1992.634716] dump_stack+0x13e/0x194 [ 1992.638363] warn_alloc.cold+0x96/0x1af [ 1992.642350] ? zone_watermark_ok_safe+0x280/0x280 [ 1992.647218] ? wait_for_completion+0x390/0x390 [ 1992.651921] __alloc_pages_slowpath+0x2114/0x26c0 [ 1992.656796] ? warn_alloc+0xf0/0xf0 [ 1992.660434] ? find_held_lock+0x2d/0x110 [ 1992.664523] ? fs_reclaim_acquire+0x10/0x10 [ 1992.668874] __alloc_pages_nodemask+0x5d3/0x700 [ 1992.673560] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1992.678592] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1992.683641] ? retint_kernel+0x2d/0x2d [ 1992.687548] alloc_pages_current+0xe7/0x1e0 [ 1992.691884] kvm_mmu_create+0xd1/0x1c0 [ 1992.695813] kvm_arch_vcpu_init+0x28b/0x8b0 [ 1992.700151] ? alloc_pages_current+0xef/0x1e0 [ 1992.704677] kvm_vcpu_init+0x26d/0x360 [ 1992.708589] vmx_create_vcpu+0xf3/0x2900 [ 1992.712697] ? __mutex_unlock_slowpath+0x75/0x780 [ 1992.717572] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 1992.722609] ? handle_rdmsr+0x6b0/0x6b0 [ 1992.726610] kvm_vm_ioctl+0x49c/0x1430 [ 1992.730520] ? __lock_acquire+0x5f7/0x4620 [ 1992.734904] ? kvm_vcpu_release+0xa0/0xa0 [ 1992.739076] ? retint_kernel+0x2d/0x2d [ 1992.742989] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1992.748033] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1992.752819] ? check_preemption_disabled+0x35/0x240 [ 1992.757873] ? retint_kernel+0x2d/0x2d [ 1992.762262] ? selinux_file_ioctl+0x83/0x560 [ 1992.766685] ? selinux_file_ioctl+0x42b/0x560 [ 1992.771319] ? kvm_vcpu_release+0xa0/0xa0 [ 1992.775605] do_vfs_ioctl+0x75a/0xfe0 [ 1992.779444] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1992.784238] ? ioctl_preallocate+0x1a0/0x1a0 [ 1992.788820] ? security_file_ioctl+0x76/0xb0 [ 1992.793281] ? security_file_ioctl+0x83/0xb0 [ 1992.797740] SyS_ioctl+0x7f/0xb0 [ 1992.801180] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1992.805201] do_syscall_64+0x1d5/0x640 [ 1992.809271] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1992.814489] RIP: 0033:0x45c829 [ 1992.817789] RSP: 002b:00007f0f9d46cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1992.825630] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 1992.832958] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 1992.840372] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1992.847765] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1992.855055] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f0f9d46d6d4 [ 1992.879817] Mem-Info: [ 1992.882623] active_anon:568494 inactive_anon:181589 isolated_anon:0 [ 1992.882623] active_file:32834 inactive_file:50486 isolated_file:0 [ 1992.882623] unevictable:7713 dirty:220 writeback:0 unstable:0 [ 1992.882623] slab_reclaimable:17176 slab_unreclaimable:130101 [ 1992.882623] mapped:66377 shmem:12029 pagetables:20564 bounce:0 [ 1992.882623] free:505195 free_pcp:485 free_cma:0 [ 1992.929000] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:232kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1992.966390] Node 1 active_anon:852468kB inactive_anon:344492kB active_file:131084kB inactive_file:201712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34820kB dirty:840kB writeback:0kB shmem:10400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1993.004808] Node 0 DMA free:10304kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1993.042143] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1993.053604] Node 0 DMA32 free:32724kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:232kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16544kB pagetables:55444kB bounce:0kB free_pcp:720kB local_pcp:640kB free_cma:0kB [ 1993.092012] lowmem_reserve[]: 0 0 0 0 0 [ 1993.102285] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1993.134214] lowmem_reserve[]: 0 0 0 0 0 [ 1993.139110] Node 1 Normal free:1977364kB min:53612kB low:67012kB high:80412kB active_anon:852472kB inactive_anon:344492kB active_file:131084kB inactive_file:201736kB unevictable:0kB writepending:876kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15392kB pagetables:26896kB bounce:0kB free_pcp:684kB local_pcp:64kB free_cma:0kB [ 1993.178739] lowmem_reserve[]: 0 0 0 0 0 [ 1993.183120] Node 0 DMA: 4*4kB (UMEH) 2*8kB (UE) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10304kB [ 1993.206640] Node 0 DMA32: 2766*4kB (UMEH) 1113*8kB (UMEH) 406*16kB (UMEH) 45*32kB (UMH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 32384kB [ 1993.229825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1993.246373] Node 1 Normal: 273*4kB (UME) 55*8kB (ME) 66*16kB (ME) 404*32kB (UME) 288*64kB (UME) 100*128kB (UME) 118*256kB (UME) 73*512kB (UME) 19*1024kB (UE) 2*2048kB (UM) 449*4096kB (UM) = 1976988kB [ 1993.272178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1993.282827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1993.296889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1993.307202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1993.322580] 93346 total pagecache pages [ 1993.326817] 0 pages in swap cache [ 1993.331687] Swap cache stats: add 0, delete 0, find 0/0 [ 1993.337552] Free swap = 0kB [ 1993.345832] Total swap = 0kB [ 1993.350295] 1965979 pages RAM [ 1993.353456] 0 pages HighMem/MovableOnly [ 1993.357497] 339050 pages reserved [ 1993.365884] 0 pages cma reserved 12:19:55 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aaf0279d"], 0x0, 0x20}, 0x20) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 12:19:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) 12:19:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010008506000010000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffffeda02e7406767ac0cbff30f4abdc7da07058e582f6ee66e1cc36100307a035cb6a5ef623d99f3d750d7c0e423049b1895843dc6cb445864bcce926a5d45d8541430b4a384044f34b75a36efde76c766aa817d58b589d16bf9b7d5eaef138bcee1e73dae3793b4a2fbc5e3c2dd541a5f5e3606c9642ac476a907bc686c7c60035195e4edc66a3a6645423680e6a6346faf91f64eeecd7c1c2ce46c5d5acd2150e12ea431ff96c8fd88f7a848cb229e6d25247d1e2bc736e9565322dd1581d58d7928d5d4750a3e0b538"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 12:19:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) 12:19:55 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000), 0x4) 12:19:55 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='gfs2meta\x00', 0x0, 0x0) 12:19:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) [ 1993.498670] gfs2: gfs2 mount does not exist 12:19:55 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aaf0279d"], 0x0, 0x20}, 0x20) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 12:19:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) 12:19:55 executing program 2: syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x100000001, 0x12800) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x181000, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) umount2(&(0x7f0000000240)='./file0\x00', 0x0) readlinkat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=""/93, 0x5d) 12:19:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x0) 12:19:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSBRK(r0, 0x5427) [ 1993.734507] IPv6: ADDRCONF(NETDEV_UP): bond5: link is not ready [ 1993.792475] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1993.848449] bond5 (unregistering): Released all slaves [ 1994.206590] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1994.229903] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1994.236059] CPU: 0 PID: 13095 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 1994.245374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1994.254741] Call Trace: [ 1994.257345] dump_stack+0x13e/0x194 [ 1994.260994] warn_alloc.cold+0x96/0x1af [ 1994.264983] ? zone_watermark_ok_safe+0x280/0x280 [ 1994.272023] ? wait_for_completion+0x390/0x390 [ 1994.277147] __alloc_pages_slowpath+0x2114/0x26c0 [ 1994.282027] ? warn_alloc+0xf0/0xf0 [ 1994.285663] ? find_held_lock+0x2d/0x110 [ 1994.289858] ? fs_reclaim_acquire+0x10/0x10 [ 1994.294225] __alloc_pages_nodemask+0x5d3/0x700 [ 1994.298929] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1994.304050] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1994.310470] ? retint_kernel+0x2d/0x2d [ 1994.314383] alloc_pages_current+0xe7/0x1e0 [ 1994.318729] kvm_mmu_create+0xd1/0x1c0 [ 1994.322635] kvm_arch_vcpu_init+0x28b/0x8b0 [ 1994.326967] ? alloc_pages_current+0xef/0x1e0 [ 1994.331478] kvm_vcpu_init+0x26d/0x360 [ 1994.335377] vmx_create_vcpu+0xf3/0x2900 [ 1994.339460] ? __mutex_unlock_slowpath+0x75/0x780 [ 1994.344320] ? handle_rdmsr+0x6b0/0x6b0 [ 1994.348322] kvm_vm_ioctl+0x49c/0x1430 [ 1994.352233] ? __lock_acquire+0x5f7/0x4620 [ 1994.356475] ? kvm_vcpu_release+0xa0/0xa0 [ 1994.360639] ? retint_kernel+0x2d/0x2d [ 1994.364550] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1994.369588] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1994.374363] ? check_preemption_disabled+0x35/0x240 [ 1994.379392] ? retint_kernel+0x2d/0x2d [ 1994.383306] ? selinux_file_ioctl+0x30a/0x560 [ 1994.387818] ? selinux_file_ioctl+0x323/0x560 [ 1994.392331] ? kvm_vcpu_release+0xa0/0xa0 [ 1994.396500] do_vfs_ioctl+0x75a/0xfe0 [ 1994.400316] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1994.405692] ? ioctl_preallocate+0x1a0/0x1a0 [ 1994.410127] ? security_file_ioctl+0x76/0xb0 [ 1994.414552] ? security_file_ioctl+0x83/0xb0 [ 1994.418980] SyS_ioctl+0x7f/0xb0 [ 1994.422357] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1994.426344] do_syscall_64+0x1d5/0x640 [ 1994.430261] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1994.435466] RIP: 0033:0x45c829 [ 1994.438658] RSP: 002b:00007f0f9d46cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1994.446389] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 1994.453684] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 1994.460969] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1994.468252] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1994.475551] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f0f9d46d6d4 [ 1994.508249] Mem-Info: [ 1994.510896] active_anon:568571 inactive_anon:181589 isolated_anon:0 [ 1994.510896] active_file:32834 inactive_file:50498 isolated_file:0 [ 1994.510896] unevictable:7713 dirty:232 writeback:0 unstable:0 [ 1994.510896] slab_reclaimable:17166 slab_unreclaimable:130725 [ 1994.510896] mapped:66390 shmem:12029 pagetables:20659 bounce:0 [ 1994.510896] free:504279 free_pcp:623 free_cma:0 [ 1994.587960] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:232kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1994.625823] IPv6: ADDRCONF(NETDEV_UP): bond5: link is not ready [ 1994.632437] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1994.648296] Node 1 active_anon:852776kB inactive_anon:344492kB active_file:131084kB inactive_file:201760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34872kB dirty:888kB writeback:0kB shmem:10400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1994.689985] bond5 (unregistering): Released all slaves [ 1994.715954] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1994.761425] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1994.767293] Node 0 DMA32 free:35204kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:232kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16544kB pagetables:55444kB bounce:0kB free_pcp:1264kB local_pcp:672kB free_cma:0kB [ 1994.832786] lowmem_reserve[]: 0 0 0 0 0 [ 1994.837431] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1994.873212] lowmem_reserve[]: 0 0 0 0 0 [ 1994.877903] Node 1 Normal free:1972016kB min:53612kB low:67012kB high:80412kB active_anon:852676kB inactive_anon:344492kB active_file:131084kB inactive_file:201760kB unevictable:0kB writepending:888kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15552kB pagetables:27044kB bounce:0kB free_pcp:1320kB local_pcp:684kB free_cma:0kB [ 1994.918718] lowmem_reserve[]: 0 0 0 0 0 [ 1994.929668] Node 0 DMA: 5*4kB (UMEH) 3*8kB (UE) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10316kB [ 1994.955575] Node 0 DMA32: 2333*4kB (UMEH) 1256*8kB (UMEH) 622*16kB (UMEH) 60*32kB (UMH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 35732kB [ 1994.980852] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1994.997570] Node 1 Normal: 339*4kB (UME) 242*8kB (UME) 146*16kB (UME) 191*32kB (UME) 286*64kB (UME) 94*128kB (UME) 119*256kB (UME) 73*512kB (UME) 19*1024kB (UE) 2*2048kB (UM) 449*4096kB (UM) = 1972572kB [ 1995.028965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1995.037942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1995.054361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1995.064610] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1995.084355] 93355 total pagecache pages [ 1995.088644] 0 pages in swap cache [ 1995.092244] Swap cache stats: add 0, delete 0, find 0/0 [ 1995.097794] Free swap = 0kB [ 1995.103564] Total swap = 0kB [ 1995.106884] 1965979 pages RAM [ 1995.111531] 0 pages HighMem/MovableOnly [ 1995.115632] 339050 pages reserved [ 1995.126768] 0 pages cma reserved [ 1995.199583] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1995.211264] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1995.217376] CPU: 0 PID: 13123 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 1995.225277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1995.234642] Call Trace: [ 1995.237245] dump_stack+0x13e/0x194 [ 1995.241109] warn_alloc.cold+0x96/0x1af [ 1995.245218] ? zone_watermark_ok_safe+0x280/0x280 [ 1995.250985] ? wait_for_completion+0x390/0x390 [ 1995.255618] __alloc_pages_slowpath+0x2114/0x26c0 [ 1995.260664] ? warn_alloc+0xf0/0xf0 [ 1995.264297] ? find_held_lock+0x2d/0x110 [ 1995.268363] ? fs_reclaim_acquire+0x10/0x10 [ 1995.272878] __alloc_pages_nodemask+0x5d3/0x700 [ 1995.277600] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1995.282637] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1995.287498] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1995.292547] alloc_pages_current+0xe7/0x1e0 [ 1995.296899] kvm_mmu_create+0xd1/0x1c0 [ 1995.300800] kvm_arch_vcpu_init+0x28b/0x8b0 [ 1995.305156] kvm_vcpu_init+0x26d/0x360 [ 1995.309835] vmx_create_vcpu+0xf3/0x2900 [ 1995.313908] ? __mutex_unlock_slowpath+0x75/0x780 [ 1995.318767] ? handle_rdmsr+0x6b0/0x6b0 [ 1995.322842] kvm_vm_ioctl+0x49c/0x1430 [ 1995.326737] ? __lock_acquire+0x5f7/0x4620 [ 1995.330993] ? kvm_vcpu_release+0xa0/0xa0 [ 1995.335145] ? check_preemption_disabled+0x35/0x240 [ 1995.340265] ? perf_trace_lock+0x109/0x4b0 [ 1995.344948] ? check_preemption_disabled+0x35/0x240 [ 1995.350175] ? perf_trace_lock+0x109/0x4b0 [ 1995.354871] ? save_trace+0x290/0x290 [ 1995.358779] ? SOFTIRQ_verbose+0x10/0x10 [ 1995.363026] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1995.368241] ? kvm_vcpu_release+0xa0/0xa0 [ 1995.372401] do_vfs_ioctl+0x75a/0xfe0 [ 1995.376212] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1995.380975] ? ioctl_preallocate+0x1a0/0x1a0 [ 1995.385400] ? security_file_ioctl+0x76/0xb0 [ 1995.389847] ? security_file_ioctl+0x83/0xb0 [ 1995.395112] SyS_ioctl+0x7f/0xb0 [ 1995.398491] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1995.402476] do_syscall_64+0x1d5/0x640 [ 1995.406386] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1995.411841] RIP: 0033:0x45c829 [ 1995.415123] RSP: 002b:00007fd87d523c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1995.422951] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 1995.430372] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 1995.437740] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1995.445116] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1995.452399] R13: 0000000000000390 R14: 00000000004c605c R15: 00007fd87d5246d4 [ 1995.536013] Mem-Info: [ 1995.539026] active_anon:568521 inactive_anon:181589 isolated_anon:0 [ 1995.539026] active_file:32834 inactive_file:50498 isolated_file:0 [ 1995.539026] unevictable:7713 dirty:238 writeback:0 unstable:0 [ 1995.539026] slab_reclaimable:17166 slab_unreclaimable:130883 [ 1995.539026] mapped:66396 shmem:12029 pagetables:20611 bounce:0 [ 1995.539026] free:504290 free_pcp:552 free_cma:0 [ 1995.585390] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:232kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1995.623523] Node 1 active_anon:852576kB inactive_anon:344492kB active_file:131084kB inactive_file:201760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34896kB dirty:912kB writeback:0kB shmem:10400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1995.661365] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1995.689083] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1995.694752] Node 0 DMA32 free:31516kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:232kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16544kB pagetables:55444kB bounce:0kB free_pcp:776kB local_pcp:672kB free_cma:0kB [ 1995.727788] lowmem_reserve[]: 0 0 0 0 0 [ 1995.733229] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1995.760973] lowmem_reserve[]: 0 0 0 0 0 [ 1995.765503] Node 1 Normal free:1974720kB min:53612kB low:67012kB high:80412kB active_anon:852576kB inactive_anon:344492kB active_file:131084kB inactive_file:201760kB unevictable:0kB writepending:912kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15616kB pagetables:27000kB bounce:0kB free_pcp:1472kB local_pcp:736kB free_cma:0kB [ 1995.797978] lowmem_reserve[]: 0 0 0 0 0 [ 1995.802701] Node 0 DMA: 5*4kB (UMEH) 3*8kB (UE) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10316kB [ 1995.822197] Node 0 DMA32: 1124*4kB (UMEH) 1256*8kB (UMEH) 622*16kB (UMEH) 60*32kB (UMH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 30896kB [ 1995.839811] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1995.852873] Node 1 Normal: 335*4kB (UME) 235*8kB (UME) 333*16kB (UME) 196*32kB (UME) 286*64kB (UME) 93*128kB (UME) 119*256kB (UME) 73*512kB (UME) 19*1024kB (UE) 2*2048kB (UM) 449*4096kB (UM) = 1975524kB [ 1995.873756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1995.884044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1995.894103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1995.904429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1995.914307] 93355 total pagecache pages [ 1995.919924] 0 pages in swap cache [ 1995.923858] Swap cache stats: add 0, delete 0, find 0/0 [ 1995.931012] Free swap = 0kB [ 1995.934390] Total swap = 0kB [ 1995.937747] 1965979 pages RAM [ 1995.943043] 0 pages HighMem/MovableOnly [ 1995.947339] 339050 pages reserved [ 1995.952459] 0 pages cma reserved 12:19:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aaf0279d"], 0x0, 0x20}, 0x20) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 12:19:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 12:19:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xf}]}, 0x24}}, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r2, 0x0, r4, 0x0, 0x400000, 0x0) 12:19:57 executing program 2: syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x100000001, 0x12800) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x181000, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) umount2(&(0x7f0000000240)='./file0\x00', 0x0) readlinkat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=""/93, 0x5d) 12:19:57 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = dup(r1) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)='\x00', 0x1}, {&(0x7f0000000340)='s', 0x1}], 0x2) 12:19:57 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aaf0279d"], 0x0, 0x20}, 0x20) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 12:19:58 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045009, &(0x7f0000000000)) 12:19:58 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = dup(r1) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)='\x00', 0x1}, {&(0x7f0000000340)='s', 0x1}], 0x2) 12:19:58 executing program 2: syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x100000001, 0x12800) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x181000, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) umount2(&(0x7f0000000240)='./file0\x00', 0x0) readlinkat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=""/93, 0x5d) 12:19:58 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 12:19:58 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = dup(r1) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)='\x00', 0x1}, {&(0x7f0000000340)='s', 0x1}], 0x2) 12:19:58 executing program 3: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='ext4\x00', 0x0, 0x0) [ 1996.535174] ptrace attach of "/root/syz-executor.1"[13288] was attempted by "/root/syz-executor.1"[13290] [ 1996.743903] print_req_error: I/O error, dev loop6, sector 2 [ 1996.760278] EXT4-fs (loop6): unable to read superblock [ 1996.770958] print_req_error: I/O error, dev loop6, sector 2 [ 1996.779337] EXT4-fs (loop6): unable to read superblock [ 1996.964996] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1996.976746] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1996.984067] CPU: 0 PID: 13270 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 1996.991975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1997.001335] Call Trace: [ 1997.003934] dump_stack+0x13e/0x194 [ 1997.007570] warn_alloc.cold+0x96/0x1af [ 1997.011554] ? zone_watermark_ok_safe+0x280/0x280 [ 1997.016410] ? check_preemption_disabled+0x35/0x240 [ 1997.021436] ? retint_kernel+0x2d/0x2d [ 1997.025349] __alloc_pages_slowpath+0x2114/0x26c0 [ 1997.030239] ? warn_alloc+0xf0/0xf0 [ 1997.033889] ? find_held_lock+0x2d/0x110 [ 1997.037974] ? fs_reclaim_acquire+0x10/0x10 [ 1997.042352] __alloc_pages_nodemask+0x5d3/0x700 [ 1997.047063] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1997.052103] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1997.057135] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1997.062202] alloc_pages_current+0xe7/0x1e0 [ 1997.066559] kvm_mmu_create+0xd1/0x1c0 [ 1997.070460] kvm_arch_vcpu_init+0x28b/0x8b0 [ 1997.074790] ? alloc_pages_current+0xef/0x1e0 [ 1997.079306] kvm_vcpu_init+0x26d/0x360 [ 1997.083215] vmx_create_vcpu+0xf3/0x2900 [ 1997.087295] ? __mutex_unlock_slowpath+0x75/0x780 [ 1997.092165] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 1997.097301] ? handle_rdmsr+0x6b0/0x6b0 [ 1997.101301] kvm_vm_ioctl+0x49c/0x1430 [ 1997.105200] ? __lock_acquire+0x5f7/0x4620 [ 1997.109614] ? kvm_vcpu_release+0xa0/0xa0 [ 1997.114360] ? retint_kernel+0x2d/0x2d [ 1997.118267] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1997.123291] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1997.128059] ? check_preemption_disabled+0x35/0x240 [ 1997.133087] ? retint_kernel+0x2d/0x2d [ 1997.137010] ? selinux_file_ioctl+0x2d0/0x560 [ 1997.141527] ? kvm_vcpu_release+0xa0/0xa0 [ 1997.145947] do_vfs_ioctl+0x75a/0xfe0 [ 1997.149775] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1997.154548] ? ioctl_preallocate+0x1a0/0x1a0 [ 1997.158990] ? security_file_ioctl+0x76/0xb0 [ 1997.163419] ? security_file_ioctl+0x83/0xb0 [ 1997.167856] SyS_ioctl+0x7f/0xb0 [ 1997.171243] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1997.175239] do_syscall_64+0x1d5/0x640 [ 1997.179156] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1997.184356] RIP: 0033:0x45c829 [ 1997.187582] RSP: 002b:00007fd87d523c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1997.195406] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 1997.202732] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 1997.212211] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1997.219507] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1997.226801] R13: 0000000000000390 R14: 00000000004c605c R15: 00007fd87d5246d4 [ 1997.269638] Mem-Info: [ 1997.272566] active_anon:568558 inactive_anon:181591 isolated_anon:0 [ 1997.272566] active_file:32834 inactive_file:50520 isolated_file:0 [ 1997.272566] unevictable:7713 dirty:253 writeback:0 unstable:0 [ 1997.272566] slab_reclaimable:17174 slab_unreclaimable:132033 [ 1997.272566] mapped:66409 shmem:12031 pagetables:20639 bounce:0 [ 1997.272566] free:503085 free_pcp:482 free_cma:0 [ 1997.317267] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:260kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1997.349927] Node 1 active_anon:852824kB inactive_anon:344500kB active_file:131084kB inactive_file:201820kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35748kB dirty:972kB writeback:0kB shmem:10408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1997.381025] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1997.412383] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1997.419657] Node 0 DMA32 free:26928kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:260kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16544kB pagetables:55444kB bounce:0kB free_pcp:748kB local_pcp:656kB free_cma:0kB [ 1997.452430] lowmem_reserve[]: 0 0 0 0 0 [ 1997.458031] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1997.487590] lowmem_reserve[]: 0 0 0 0 0 [ 1997.493469] Node 1 Normal free:1975388kB min:53612kB low:67012kB high:80412kB active_anon:852724kB inactive_anon:344500kB active_file:131084kB inactive_file:201820kB unevictable:0kB writepending:972kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15552kB pagetables:27112kB bounce:0kB free_pcp:1200kB local_pcp:512kB free_cma:0kB [ 1997.525610] lowmem_reserve[]: 0 0 0 0 0 [ 1997.532004] Node 0 DMA: 5*4kB (UMEH) 3*8kB (UE) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10316kB [ 1997.551211] Node 0 DMA32: 610*4kB (UMEH) 848*8kB (UMEH) 632*16kB (UMEH) 74*32kB (UMH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 26184kB [ 1997.568975] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1997.581007] Node 1 Normal: 185*4kB (UME) 228*8kB (UME) 369*16kB (UME) 210*32kB (UME) 282*64kB (UME) 87*128kB (UME) 118*256kB (UME) 72*512kB (UME) 20*1024kB (UME) 2*2048kB (UM) 449*4096kB (UM) = 1975124kB [ 1997.603286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1997.613732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1997.623807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1997.634758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1997.644879] 93366 total pagecache pages [ 1997.650879] 0 pages in swap cache [ 1997.654902] Swap cache stats: add 0, delete 0, find 0/0 [ 1997.662551] Free swap = 0kB [ 1997.665975] Total swap = 0kB [ 1997.672842] 1965979 pages RAM [ 1997.676372] 0 pages HighMem/MovableOnly [ 1997.682492] 339050 pages reserved [ 1997.686347] 0 pages cma reserved [ 1997.768706] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1997.780138] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1997.786339] CPU: 0 PID: 13275 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 1997.794555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1997.803927] Call Trace: [ 1997.806535] dump_stack+0x13e/0x194 [ 1997.810377] warn_alloc.cold+0x96/0x1af [ 1997.814361] ? zone_watermark_ok_safe+0x280/0x280 [ 1997.819235] ? wait_for_completion+0x390/0x390 [ 1997.823839] __alloc_pages_slowpath+0x2114/0x26c0 [ 1997.828807] ? warn_alloc+0xf0/0xf0 [ 1997.832439] ? find_held_lock+0x2d/0x110 [ 1997.836512] ? fs_reclaim_acquire+0x10/0x10 [ 1997.840956] __alloc_pages_nodemask+0x5d3/0x700 [ 1997.845640] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1997.850975] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1997.856011] ? retint_kernel+0x2d/0x2d [ 1997.859916] alloc_pages_current+0xe7/0x1e0 [ 1997.864262] kvm_mmu_create+0xd1/0x1c0 [ 1997.868178] kvm_arch_vcpu_init+0x28b/0x8b0 [ 1997.872522] ? alloc_pages_current+0xef/0x1e0 [ 1997.877046] kvm_vcpu_init+0x26d/0x360 [ 1997.880954] vmx_create_vcpu+0xf3/0x2900 [ 1997.885032] ? __mutex_unlock_slowpath+0x75/0x780 [ 1997.889893] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 1997.894922] ? handle_rdmsr+0x6b0/0x6b0 [ 1997.898920] kvm_vm_ioctl+0x49c/0x1430 [ 1997.902819] ? __lock_acquire+0x5f7/0x4620 [ 1997.907116] ? kvm_vcpu_release+0xa0/0xa0 [ 1997.911292] ? check_preemption_disabled+0x35/0x240 [ 1997.916339] ? retint_kernel+0x2d/0x2d [ 1997.920444] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1997.925500] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1997.930279] ? check_preemption_disabled+0x35/0x240 [ 1997.935317] ? retint_kernel+0x2d/0x2d [ 1997.939259] ? kvm_vcpu_release+0xa0/0xa0 [ 1997.946850] ? kvm_vcpu_release+0xa0/0xa0 [ 1997.951054] do_vfs_ioctl+0x75a/0xfe0 [ 1997.954953] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1997.959739] ? ioctl_preallocate+0x1a0/0x1a0 [ 1997.964173] ? security_file_ioctl+0x76/0xb0 [ 1997.969069] ? security_file_ioctl+0x83/0xb0 [ 1997.973590] SyS_ioctl+0x7f/0xb0 [ 1997.976967] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1997.980954] do_syscall_64+0x1d5/0x640 [ 1997.984914] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1997.990259] RIP: 0033:0x45c829 [ 1997.993452] RSP: 002b:00007f0f9d46cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1998.001186] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 1998.008478] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 1998.015765] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1998.023061] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1998.030361] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f0f9d46d6d4 12:19:59 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aaf0279d"], 0x0, 0x20}, 0x20) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 12:19:59 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = dup(r1) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)='\x00', 0x1}, {&(0x7f0000000340)='s', 0x1}], 0x2) 12:20:00 executing program 1: socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') r1 = socket$inet6(0xa, 0x3, 0x2f) dup(r1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') eventfd2(0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) pipe2(&(0x7f0000002380), 0x0) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0356000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="c14752d65308bee4f6b5e0f209c5013303f8805b203eb7cf8199c5977e6703e116ef"], 0x44}}, 0x0) 12:20:00 executing program 2: syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x100000001, 0x12800) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x181000, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) umount2(&(0x7f0000000240)='./file0\x00', 0x0) readlinkat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=""/93, 0x5d) 12:20:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffe36, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp], 0x2) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12:20:00 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aaf0279d"], 0x0, 0x20}, 0x20) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 1998.369291] IPv6: ADDRCONF(NETDEV_UP): macvlan2: link is not ready 12:20:00 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1f) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x0, 0x0) [ 1998.410068] 8021q: adding VLAN 0 to HW filter on device macvlan2 12:20:00 executing program 1: socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') r1 = socket$inet6(0xa, 0x3, 0x2f) dup(r1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') eventfd2(0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) pipe2(&(0x7f0000002380), 0x0) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0356000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="c14752d65308bee4f6b5e0f209c5013303f8805b203eb7cf8199c5977e6703e116ef"], 0x44}}, 0x0) [ 1998.523867] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1998.575464] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1998.610641] CPU: 1 PID: 13340 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0 [ 1998.618590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1998.627958] Call Trace: [ 1998.630568] dump_stack+0x13e/0x194 [ 1998.634223] warn_alloc.cold+0x96/0x1af [ 1998.638213] ? zone_watermark_ok_safe+0x280/0x280 [ 1998.643092] ? wait_for_completion+0x390/0x390 [ 1998.647697] __alloc_pages_slowpath+0x2114/0x26c0 [ 1998.652580] ? warn_alloc+0xf0/0xf0 [ 1998.655239] IPv6: ADDRCONF(NETDEV_UP): macvlan2: link is not ready [ 1998.656221] ? find_held_lock+0x2d/0x110 [ 1998.656236] ? fs_reclaim_acquire+0x10/0x10 [ 1998.656264] __alloc_pages_nodemask+0x5d3/0x700 [ 1998.656278] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1998.656290] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1998.673437] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1998.675738] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1998.675767] alloc_pages_current+0xe7/0x1e0 [ 1998.675784] kvm_mmu_create+0xd1/0x1c0 [ 1998.675798] kvm_arch_vcpu_init+0x28b/0x8b0 [ 1998.709708] ? alloc_pages_current+0xef/0x1e0 [ 1998.714234] kvm_vcpu_init+0x26d/0x360 [ 1998.718404] vmx_create_vcpu+0xf3/0x2900 [ 1998.722490] ? __mutex_unlock_slowpath+0x75/0x780 [ 1998.727349] ? handle_rdmsr+0x6b0/0x6b0 [ 1998.731343] kvm_vm_ioctl+0x49c/0x1430 [ 1998.735280] ? __lock_acquire+0x5f7/0x4620 [ 1998.739549] ? kvm_vcpu_release+0xa0/0xa0 [ 1998.743711] ? check_preemption_disabled+0x35/0x240 [ 1998.748748] ? perf_trace_lock+0x109/0x4b0 [ 1998.753014] ? check_preemption_disabled+0x35/0x240 [ 1998.758055] ? perf_trace_lock+0x109/0x4b0 [ 1998.762315] ? save_trace+0x290/0x290 [ 1998.766136] ? SOFTIRQ_verbose+0x10/0x10 [ 1998.770328] ? kvm_vcpu_release+0xa0/0xa0 [ 1998.774582] do_vfs_ioctl+0x75a/0xfe0 [ 1998.778419] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1998.783189] ? ioctl_preallocate+0x1a0/0x1a0 [ 1998.787631] ? security_file_ioctl+0x76/0xb0 [ 1998.792519] ? security_file_ioctl+0x83/0xb0 [ 1998.796942] SyS_ioctl+0x7f/0xb0 [ 1998.800318] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1998.804426] do_syscall_64+0x1d5/0x640 [ 1998.808335] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1998.813537] RIP: 0033:0x45c829 [ 1998.816766] RSP: 002b:00007f6348a13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1998.824495] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 1998.831796] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 1998.841163] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1998.848442] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 12:20:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000300000000000000", 0x3f1}], 0x1) [ 1998.855721] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f6348a146d4 12:20:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=@known='trusted.overlay.opaque\x00') sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@cache_loose='cache=loose'}, {@version_L='version=9p2000.L'}, {@loose='loose'}]}}) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x4084) getpid() sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) [ 1998.977060] warn_alloc_show_mem: 1 callbacks suppressed [ 1998.977065] Mem-Info: [ 1998.994176] active_anon:568598 inactive_anon:181591 isolated_anon:0 [ 1998.994176] active_file:32834 inactive_file:50509 isolated_file:0 [ 1998.994176] unevictable:7713 dirty:259 writeback:0 unstable:0 [ 1998.994176] slab_reclaimable:17218 slab_unreclaimable:132769 [ 1998.994176] mapped:66459 shmem:12031 pagetables:20730 bounce:0 12:20:00 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e6, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x834, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0xfffffffd) poll(0x0, 0x0, 0x8000000000000200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = inotify_init1(0x0) splice(r3, 0x0, r2, 0x0, 0x39, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12:20:00 executing program 1: socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') r1 = socket$inet6(0xa, 0x3, 0x2f) dup(r1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') eventfd2(0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) pipe2(&(0x7f0000002380), 0x0) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0356000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="c14752d65308bee4f6b5e0f209c5013303f8805b203eb7cf8199c5977e6703e116ef"], 0x44}}, 0x0) [ 1998.994176] free:502069 free_pcp:467 free_cma:0 [ 1999.085333] IPv6: ADDRCONF(NETDEV_UP): macvlan2: link is not ready [ 1999.102356] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1999.109198] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:260kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1999.166500] Node 1 active_anon:853076kB inactive_anon:344500kB active_file:131084kB inactive_file:201868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35012kB dirty:1040kB writeback:0kB shmem:10408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1999.201603] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1999.229991] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1999.236103] Node 0 DMA32 free:32268kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:260kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16544kB pagetables:55444kB bounce:0kB free_pcp:1308kB local_pcp:712kB free_cma:0kB [ 1999.270519] lowmem_reserve[]: 0 0 0 0 0 [ 1999.274892] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1999.334082] lowmem_reserve[]: 0 0 0 0 0 [ 1999.340401] Node 1 Normal free:1964344kB min:53612kB low:67012kB high:80412kB active_anon:853076kB inactive_anon:344500kB active_file:131084kB inactive_file:201868kB unevictable:0kB writepending:1040kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15680kB pagetables:27396kB bounce:0kB free_pcp:1260kB local_pcp:628kB free_cma:0kB [ 1999.378564] lowmem_reserve[]: 0 0 0 0 0 [ 1999.383870] Node 0 DMA: 5*4kB (UMEH) 3*8kB (UE) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10316kB [ 1999.403165] Node 0 DMA32: 1659*4kB (UMEH) 1199*8kB (UMEH) 630*16kB (UMEH) 77*32kB (UMH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 33252kB [ 1999.420114] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1999.432868] Node 1 Normal: 24*4kB (UME) 44*8kB (ME) 40*16kB (ME) 240*32kB (UME) 281*64kB (UME) 52*128kB (UME) 118*256kB (UME) 72*512kB (UME) 20*1024kB (UME) 2*2048kB (UM) 449*4096kB (UM) = 1964160kB [ 1999.451772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1999.461591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1999.471010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1999.480819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1999.490298] 93380 total pagecache pages [ 1999.494472] 0 pages in swap cache [ 1999.499985] Swap cache stats: add 0, delete 0, find 0/0 [ 1999.505473] Free swap = 0kB [ 1999.509997] Total swap = 0kB [ 1999.513131] 1965979 pages RAM [ 1999.517545] 0 pages HighMem/MovableOnly [ 1999.523471] 339050 pages reserved [ 1999.527156] 0 pages cma reserved [ 1999.663336] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1999.676372] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1999.683314] CPU: 1 PID: 13338 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 1999.691336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1999.701167] Call Trace: [ 1999.703768] dump_stack+0x13e/0x194 [ 1999.707597] warn_alloc.cold+0x96/0x1af [ 1999.712191] ? zone_watermark_ok_safe+0x280/0x280 [ 1999.717079] ? wait_for_completion+0x390/0x390 [ 1999.721681] __alloc_pages_slowpath+0x2114/0x26c0 [ 1999.726553] ? warn_alloc+0xf0/0xf0 [ 1999.730197] ? find_held_lock+0x2d/0x110 [ 1999.734271] ? fs_reclaim_acquire+0x10/0x10 [ 1999.738638] __alloc_pages_nodemask+0x5d3/0x700 [ 1999.743332] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1999.748362] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1999.753216] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1999.758264] alloc_pages_current+0xe7/0x1e0 [ 1999.762601] kvm_mmu_create+0xd1/0x1c0 [ 1999.766508] kvm_arch_vcpu_init+0x28b/0x8b0 [ 1999.771028] ? alloc_pages_current+0xef/0x1e0 [ 1999.775828] kvm_vcpu_init+0x26d/0x360 [ 1999.780221] vmx_create_vcpu+0xf3/0x2900 [ 1999.784462] ? __mutex_unlock_slowpath+0x75/0x780 [ 1999.790104] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 1999.795223] ? handle_rdmsr+0x6b0/0x6b0 [ 1999.799222] kvm_vm_ioctl+0x49c/0x1430 [ 1999.803126] ? __lock_acquire+0x5f7/0x4620 [ 1999.807390] ? kvm_vcpu_release+0xa0/0xa0 [ 1999.811547] ? retint_kernel+0x2d/0x2d [ 1999.815457] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1999.821015] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1999.825785] ? check_preemption_disabled+0x35/0x240 [ 1999.830813] ? retint_kernel+0x2d/0x2d [ 1999.834746] ? selinux_file_ioctl+0x83/0x560 [ 1999.839362] ? selinux_file_ioctl+0xb8/0x560 [ 1999.843795] ? kvm_vcpu_release+0xa0/0xa0 [ 1999.847974] do_vfs_ioctl+0x75a/0xfe0 [ 1999.851977] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1999.857141] ? ioctl_preallocate+0x1a0/0x1a0 [ 1999.862978] ? security_file_ioctl+0x76/0xb0 [ 1999.867414] ? security_file_ioctl+0x83/0xb0 [ 1999.871862] SyS_ioctl+0x7f/0xb0 [ 1999.875241] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1999.879284] do_syscall_64+0x1d5/0x640 [ 1999.883353] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1999.889252] RIP: 0033:0x45c829 [ 1999.892451] RSP: 002b:00007f0f9d46cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1999.900520] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 1999.907795] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 1999.915082] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1999.923112] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1999.930831] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f0f9d46d6d4 [ 2000.005175] Mem-Info: [ 2000.007966] active_anon:568596 inactive_anon:181591 isolated_anon:0 [ 2000.007966] active_file:32834 inactive_file:50518 isolated_file:0 [ 2000.007966] unevictable:7713 dirty:270 writeback:0 unstable:0 [ 2000.007966] slab_reclaimable:17226 slab_unreclaimable:133165 [ 2000.007966] mapped:66450 shmem:12031 pagetables:20673 bounce:0 [ 2000.007966] free:501864 free_pcp:534 free_cma:0 [ 2000.009704] syz-executor.0: [ 2000.053430] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:260kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2000.083478] page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2000.095441] Node 1 active_anon:852844kB inactive_anon:344500kB active_file:131084kB inactive_file:201904kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35044kB dirty:1088kB writeback:0kB shmem:10408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2000.109742] syz-executor.0 cpuset= [ 2000.138489] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2000.147192] / [ 2000.178253] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2000.185824] Node 0 DMA32 free:33036kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:260kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16512kB pagetables:55444kB bounce:0kB free_pcp:820kB local_pcp:728kB free_cma:0kB [ 2000.194840] mems_allowed=0-1 [ 2000.236069] lowmem_reserve[]: 0 0 0 0 0 [ 2000.247043] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2000.247941] CPU: 0 PID: 13328 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 2000.280699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2000.281571] lowmem_reserve[]: [ 2000.290057] Call Trace: [ 2000.290081] dump_stack+0x13e/0x194 [ 2000.290096] warn_alloc.cold+0x96/0x1af [ 2000.290107] ? zone_watermark_ok_safe+0x280/0x280 [ 2000.290130] ? wait_for_completion+0x390/0x390 [ 2000.290146] __alloc_pages_slowpath+0x2114/0x26c0 [ 2000.290244] ? warn_alloc+0xf0/0xf0 [ 2000.290287] __alloc_pages_nodemask+0x5d3/0x700 [ 2000.290301] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2000.290310] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2000.290320] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2000.290346] alloc_pages_current+0xe7/0x1e0 [ 2000.290362] kvm_mmu_create+0xd1/0x1c0 [ 2000.290376] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2000.290386] ? alloc_pages_current+0xef/0x1e0 [ 2000.290401] kvm_vcpu_init+0x26d/0x360 [ 2000.290416] vmx_create_vcpu+0xf3/0x2900 [ 2000.290433] ? __mutex_unlock_slowpath+0x75/0x780 [ 2000.290445] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2000.290459] ? handle_rdmsr+0x6b0/0x6b0 [ 2000.290478] kvm_vm_ioctl+0x49c/0x1430 [ 2000.290493] ? __lock_acquire+0x5f7/0x4620 [ 2000.290505] ? kvm_vcpu_release+0xa0/0xa0 [ 2000.290516] ? check_preemption_disabled+0x35/0x240 [ 2000.290531] ? perf_trace_lock+0x109/0x4b0 [ 2000.290545] ? check_preemption_disabled+0x35/0x240 [ 2000.290559] ? perf_trace_lock+0x109/0x4b0 [ 2000.290572] ? save_trace+0x290/0x290 [ 2000.290586] ? SOFTIRQ_verbose+0x10/0x10 [ 2000.290599] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2000.290613] ? kvm_vcpu_release+0xa0/0xa0 [ 2000.290628] do_vfs_ioctl+0x75a/0xfe0 [ 2000.290641] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2000.290655] ? ioctl_preallocate+0x1a0/0x1a0 [ 2000.290681] ? security_file_ioctl+0x76/0xb0 [ 2000.290691] ? security_file_ioctl+0x83/0xb0 [ 2000.290867] SyS_ioctl+0x7f/0xb0 [ 2000.290882] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2000.296422] 0 [ 2000.296591] do_syscall_64+0x1d5/0x640 [ 2000.296612] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2000.296623] RIP: 0033:0x45c829 [ 2000.296629] RSP: 002b:00007fd87d523c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2000.296648] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2000.313582] 0 [ 2000.313640] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2000.313647] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2000.313654] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2000.313661] R13: 0000000000000390 R14: 00000000004c605c R15: 00007fd87d5246d4 [ 2000.526774] 0 0 0 [ 2000.529970] Node 1 Normal free:1965648kB min:53612kB low:67012kB high:80412kB active_anon:852844kB inactive_anon:344500kB active_file:131084kB inactive_file:201904kB unevictable:0kB writepending:1088kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15680kB pagetables:27212kB bounce:0kB free_pcp:1232kB local_pcp:672kB free_cma:0kB [ 2000.560890] lowmem_reserve[]: 0 0 0 0 0 [ 2000.565152] Node 0 DMA: 5*4kB (UMEH) 3*8kB (UE) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10316kB [ 2000.583586] Node 0 DMA32: 1012*4kB (UMEH) 1352*8kB (UMEH) 630*16kB (UMEH) 78*32kB (UMH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 31920kB [ 2000.600653] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2000.612968] Node 1 Normal: 42*4kB (UME) 55*8kB (ME) 107*16kB (UME) 234*32kB (UME) 281*64kB (UME) 51*128kB (UME) 118*256kB (UME) 72*512kB (UME) 20*1024kB (UME) 2*2048kB (UM) 449*4096kB (UM) = 1965072kB [ 2000.633281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2000.643120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2000.653764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2000.663674] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2000.673488] 93387 total pagecache pages [ 2000.677666] 0 pages in swap cache [ 2000.682790] Swap cache stats: add 0, delete 0, find 0/0 [ 2000.689234] Free swap = 0kB [ 2000.692375] Total swap = 0kB [ 2000.695595] 1965979 pages RAM [ 2000.700853] 0 pages HighMem/MovableOnly [ 2000.704982] 339050 pages reserved [ 2000.710162] 0 pages cma reserved 12:20:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=@known='trusted.overlay.opaque\x00') sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@cache_loose='cache=loose'}, {@version_L='version=9p2000.L'}, {@loose='loose'}]}}) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x4084) getpid() sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) 12:20:02 executing program 1: socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') r1 = socket$inet6(0xa, 0x3, 0x2f) dup(r1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') eventfd2(0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) pipe2(&(0x7f0000002380), 0x0) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0356000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="c14752d65308bee4f6b5e0f209c5013303f8805b203eb7cf8199c5977e6703e116ef"], 0x44}}, 0x0) 12:20:02 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='-5', 0x2) 12:20:02 executing program 5: mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240), 0x24, 0x0) 12:20:02 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='-5', 0x2) [ 2000.910744] IPv6: ADDRCONF(NETDEV_UP): macvlan2: link is not ready [ 2000.934113] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2001.027937] overlayfs: filesystem on './file0' not supported as upperdir 12:20:02 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) accept$inet(r0, 0x0, 0x0) 12:20:02 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='-5', 0x2) 12:20:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=@known='trusted.overlay.opaque\x00') sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@cache_loose='cache=loose'}, {@version_L='version=9p2000.L'}, {@loose='loose'}]}}) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x4084) getpid() sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a01020000000000000000020000000900010073797a300000000014000480080002400000000008000140000000060900030073797a3200000000140000001000010000000000000000000000000a73143fd5c04a560529889a9ec8b1f12ab671e6fc08974c713b86923d640588d52f4dff4143ad9753a94227f7250f96e3923c9035d3885b6a49bbe4523e52cb1e062fe493a452f8198ab85dea9ebe3fb6ea2d5d5b65e60a8df79f7e56fce34ca1e5a912190d1468fa13996dc49a58424f24b3784030f6650091801c86312fa11cf18cc0cc02d7a2ed9887990b74f06c7cb61920d205f4043d3032e1ccb0e5f58f1f"], 0x88}}, 0x0) 12:20:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) link(&(0x7f0000000100)='\x00', &(0x7f0000000280)='./file1\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000022000000350000000000907c8587e2e813c400009500f8ff00000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64deb09e3732d498}, 0x64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0x0, 0x0}, 0x10) pipe(&(0x7f0000000600)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) dup(0xffffffffffffffff) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) 12:20:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000007ffff0f00dd990e9ced2d8c236f1f4e"], 0x14) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) [ 2001.270408] 9pnet: p9_errstr2errno: server reported unknown error Ý™œí-Œ#oN [ 2001.319477] 9pnet: p9_errstr2errno: server reported unknown error Ý™œí-Œ#oN [ 2001.520553] block nbd5: Attempted send on invalid socket [ 2001.526093] print_req_error: I/O error, dev nbd5, sector 0 [ 2001.536086] XFS (nbd5): SB validate failed with error -5. 12:20:03 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='-5', 0x2) 12:20:03 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010002000000000002000000", @ANYRES32=0x0, @ANYBLOB="01000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000500", @ANYRES32, @ANYBLOB="040007000000000008000200", @ANYRES32, @ANYBLOB="10000200000000002000030000000000"], 0x7c, 0x2) 12:20:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=@known='trusted.overlay.opaque\x00') sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@cache_loose='cache=loose'}, {@version_L='version=9p2000.L'}, {@loose='loose'}]}}) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x4084) getpid() sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) 12:20:03 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507008da4831d5f948e00000200", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x7}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 12:20:03 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e6, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x834, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0xfffffffd) poll(0x0, 0x0, 0x8000000000000200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = inotify_init1(0x0) splice(r3, 0x0, r2, 0x0, 0x39, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12:20:03 executing program 5: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace(0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000100", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRESHEX, @ANYRES32=0x0, @ANYRESOCT=r1], 0x7, 0x0) setuid(0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)="b0a68e360650", 0x6, 0x0, 0x0, 0x0) close(r3) 12:20:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e8030000d0010000e8000000e8000000000300000003000000030000040000000000000000000000ac141400e0000002000000000000523c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076657468305f766972745f7769666900636169663000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e800000000000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000300100000000000000000000000000000000000000000000000070004e464c4f47000000000000000000000000000000000000000000000000000000000000000000000000006257a0cae003f8f06206abac020c1d15961641453fd040c2322b20964ad82a07fc6efaaa66e8e12912a47af9aac0a369225ff6c3a2168e91470b4cc1edb6f200000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @rand_addr, @random='\b\x00', @local}}}}, 0x0) 12:20:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) 12:20:04 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 12:20:04 executing program 4: creat(&(0x7f0000000800)='./file0\x00', 0x0) setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000180)='/usr/sbin/cupsd\x00', 0x10, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:systemd_passwd_var_run_t:s0\x00', 0x48, 0x0) [ 2002.369166] arp_tables: arptables: counters copy to user failed while replacing table [ 2002.394346] arp_tables: arptables: counters copy to user failed while replacing table 12:20:04 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x8509, 0x0, 0x0, 0x0, 0x0) [ 2002.426207] SELinux: Context /usr/sbin/cupsd is not valid (left unmapped). 12:20:04 executing program 5: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace(0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000100", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRESHEX, @ANYRES32=0x0, @ANYRESOCT=r1], 0x7, 0x0) setuid(0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)="b0a68e360650", 0x6, 0x0, 0x0, 0x0) close(r3) [ 2002.501733] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). 12:20:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001c000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x0, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:20:04 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 12:20:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0x9, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2002.696384] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 12:20:04 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) [ 2002.747293] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2002.772974] CPU: 1 PID: 13484 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 2002.780911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2002.790283] Call Trace: [ 2002.792979] dump_stack+0x13e/0x194 [ 2002.796628] warn_alloc.cold+0x96/0x1af [ 2002.800629] ? zone_watermark_ok_safe+0x280/0x280 [ 2002.805507] ? wait_for_completion+0x390/0x390 [ 2002.810220] __alloc_pages_slowpath+0x2114/0x26c0 [ 2002.815271] ? warn_alloc+0xf0/0xf0 [ 2002.818914] ? find_held_lock+0x2d/0x110 [ 2002.822998] ? fs_reclaim_acquire+0x10/0x10 [ 2002.827364] __alloc_pages_nodemask+0x5d3/0x700 [ 2002.832059] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2002.837094] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2002.842079] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2002.847131] alloc_pages_current+0xe7/0x1e0 [ 2002.851483] kvm_mmu_create+0xd1/0x1c0 [ 2002.855401] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2002.859772] ? alloc_pages_current+0xef/0x1e0 [ 2002.864291] kvm_vcpu_init+0x26d/0x360 [ 2002.868243] vmx_create_vcpu+0xf3/0x2900 [ 2002.872503] ? __mutex_unlock_slowpath+0x75/0x780 [ 2002.877371] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2002.882406] ? handle_rdmsr+0x6b0/0x6b0 [ 2002.886398] kvm_vm_ioctl+0x49c/0x1430 [ 2002.890330] ? __lock_acquire+0x5f7/0x4620 [ 2002.894585] ? kvm_vcpu_release+0xa0/0xa0 [ 2002.898752] ? check_preemption_disabled+0x35/0x240 [ 2002.904308] ? perf_trace_lock+0x109/0x4b0 [ 2002.908562] ? check_preemption_disabled+0x35/0x240 [ 2002.913625] ? perf_trace_lock+0x109/0x4b0 [ 2002.917895] ? save_trace+0x290/0x290 [ 2002.921798] ? SOFTIRQ_verbose+0x10/0x10 [ 2002.926073] ? kvm_vcpu_release+0xa0/0xa0 [ 2002.930236] do_vfs_ioctl+0x75a/0xfe0 [ 2002.934059] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2002.938834] ? ioctl_preallocate+0x1a0/0x1a0 [ 2002.943275] ? security_file_ioctl+0x76/0xb0 [ 2002.947697] ? security_file_ioctl+0x83/0xb0 [ 2002.952137] SyS_ioctl+0x7f/0xb0 [ 2002.955519] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2002.959515] do_syscall_64+0x1d5/0x640 [ 2002.963423] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2002.968749] RIP: 0033:0x45c829 [ 2002.971945] RSP: 002b:00007fd87d523c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2002.979764] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2002.987074] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2002.994357] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2003.002165] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2003.009452] R13: 0000000000000390 R14: 00000000004c605c R15: 00007fd87d5246d4 [ 2003.074720] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2003.089256] warn_alloc_show_mem: 1 callbacks suppressed [ 2003.089261] Mem-Info: [ 2003.112372] active_anon:572058 inactive_anon:181591 isolated_anon:0 [ 2003.112372] active_file:32834 inactive_file:50552 isolated_file:0 [ 2003.112372] unevictable:7713 dirty:142 writeback:0 unstable:0 [ 2003.112372] slab_reclaimable:17280 slab_unreclaimable:134004 [ 2003.112372] mapped:66445 shmem:12031 pagetables:20795 bounce:0 [ 2003.112372] free:497161 free_pcp:600 free_cma:0 [ 2003.135471] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2003.183589] CPU: 0 PID: 13490 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 2003.191532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2003.199643] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:260kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2003.200910] Call Trace: [ 2003.200935] dump_stack+0x13e/0x194 [ 2003.200954] warn_alloc.cold+0x96/0x1af [ 2003.200966] ? zone_watermark_ok_safe+0x280/0x280 [ 2003.200990] ? wait_for_completion+0x390/0x390 [ 2003.246690] Node 1 active_anon:853524kB inactive_anon:344500kB active_file:131084kB inactive_file:201948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35092kB dirty:528kB writeback:0kB shmem:10408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2003.250737] __alloc_pages_slowpath+0x2114/0x26c0 [ 2003.250769] ? warn_alloc+0xf0/0xf0 [ 2003.250781] ? find_held_lock+0x2d/0x110 [ 2003.250793] ? fs_reclaim_acquire+0x10/0x10 [ 2003.250815] __alloc_pages_nodemask+0x5d3/0x700 [ 2003.250828] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2003.250837] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2003.250847] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2003.250870] alloc_pages_current+0xe7/0x1e0 [ 2003.250885] kvm_mmu_create+0xd1/0x1c0 [ 2003.250898] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2003.250912] ? alloc_pages_current+0xef/0x1e0 [ 2003.287641] Node 0 [ 2003.288797] kvm_vcpu_init+0x26d/0x360 [ 2003.288814] vmx_create_vcpu+0xf3/0x2900 [ 2003.288831] ? __mutex_unlock_slowpath+0x75/0x780 [ 2003.288850] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2003.288864] ? handle_rdmsr+0x6b0/0x6b0 [ 2003.288884] kvm_vm_ioctl+0x49c/0x1430 [ 2003.288898] ? __lock_acquire+0x5f7/0x4620 [ 2003.288913] ? kvm_vcpu_release+0xa0/0xa0 [ 2003.297558] DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2003.301999] ? check_preemption_disabled+0x35/0x240 [ 2003.302018] ? perf_trace_lock+0x109/0x4b0 [ 2003.302030] ? check_preemption_disabled+0x35/0x240 [ 2003.302043] ? perf_trace_lock+0x109/0x4b0 [ 2003.302055] ? save_trace+0x290/0x290 [ 2003.302065] ? SOFTIRQ_verbose+0x10/0x10 [ 2003.302083] ? kvm_vcpu_release+0xa0/0xa0 [ 2003.302096] do_vfs_ioctl+0x75a/0xfe0 [ 2003.302111] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2003.302124] ? ioctl_preallocate+0x1a0/0x1a0 [ 2003.302150] ? security_file_ioctl+0x76/0xb0 [ 2003.302160] ? security_file_ioctl+0x83/0xb0 [ 2003.302173] SyS_ioctl+0x7f/0xb0 [ 2003.302182] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2003.302197] do_syscall_64+0x1d5/0x640 [ 2003.302215] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2003.314132] lowmem_reserve[]: [ 2003.317447] RIP: 0033:0x45c829 [ 2003.317453] RSP: 002b:00007f615e1f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2003.317466] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2003.317472] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2003.317479] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2003.317485] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2003.317490] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f615e1f76d4 [ 2003.526537] 0 2557 2557 2557 2557 [ 2003.531164] Node 0 DMA32 free:31396kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:260kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16512kB pagetables:55444kB bounce:0kB free_pcp:1220kB local_pcp:656kB free_cma:0kB [ 2003.575275] lowmem_reserve[]: 0 0 0 0 0 [ 2003.579574] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2003.613488] lowmem_reserve[]: 0 0 0 0 0 [ 2003.617576] Node 1 Normal free:1959552kB min:53612kB low:67012kB high:80412kB active_anon:853324kB inactive_anon:344500kB active_file:131084kB inactive_file:201948kB unevictable:0kB writepending:528kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15616kB pagetables:27588kB bounce:0kB free_pcp:1252kB local_pcp:620kB free_cma:0kB [ 2003.652465] lowmem_reserve[]: 0 0 0 0 0 [ 2003.656530] Node 0 DMA: 5*4kB (UMEH) 3*8kB (UE) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10316kB [ 2003.674437] Node 0 DMA32: 858*4kB (UMEH) 1401*8kB (UMEH) 653*16kB (UMEH) 87*32kB (UMH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 32352kB [ 2003.691504] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2003.703418] Node 1 Normal: 326*4kB (UME) 72*8kB (M) 64*16kB (UME) 172*32kB (UME) 291*64kB (UME) 38*128kB (UME) 117*256kB (UME) 74*512kB (UME) 20*1024kB (UME) 2*2048kB (UM) 448*4096kB (UM) = 1959320kB [ 2003.722840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2003.732807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2003.743062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2003.753342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2003.763896] 93398 total pagecache pages [ 2003.769792] 0 pages in swap cache [ 2003.773847] Swap cache stats: add 0, delete 0, find 0/0 [ 2003.782250] Free swap = 0kB [ 2003.785586] Total swap = 0kB [ 2003.790698] 1965979 pages RAM [ 2003.794035] 0 pages HighMem/MovableOnly [ 2003.799957] 339050 pages reserved [ 2003.803653] 0 pages cma reserved 12:20:06 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e6, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x834, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0xfffffffd) poll(0x0, 0x0, 0x8000000000000200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = inotify_init1(0x0) splice(r3, 0x0, r2, 0x0, 0x39, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12:20:06 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 12:20:06 executing program 5: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace(0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000100", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRESHEX, @ANYRES32=0x0, @ANYRESOCT=r1], 0x7, 0x0) setuid(0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)="b0a68e360650", 0x6, 0x0, 0x0, 0x0) close(r3) 12:20:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) 12:20:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0x9, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:20:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001c000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x0, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2005.306641] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2005.348817] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2005.367162] CPU: 0 PID: 13531 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 2005.375520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2005.384889] Call Trace: [ 2005.387495] dump_stack+0x13e/0x194 [ 2005.391144] warn_alloc.cold+0x96/0x1af [ 2005.395244] ? zone_watermark_ok_safe+0x280/0x280 [ 2005.400120] ? wait_for_completion+0x390/0x390 [ 2005.404758] __alloc_pages_slowpath+0x2114/0x26c0 [ 2005.409637] ? warn_alloc+0xf0/0xf0 [ 2005.413283] ? find_held_lock+0x2d/0x110 [ 2005.417373] ? fs_reclaim_acquire+0x10/0x10 [ 2005.421732] __alloc_pages_nodemask+0x5d3/0x700 [ 2005.426422] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2005.431453] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2005.436831] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2005.441875] alloc_pages_current+0xe7/0x1e0 [ 2005.446300] kvm_mmu_create+0xd1/0x1c0 [ 2005.450202] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2005.455750] ? alloc_pages_current+0xef/0x1e0 [ 2005.460260] kvm_vcpu_init+0x26d/0x360 [ 2005.464161] vmx_create_vcpu+0xf3/0x2900 [ 2005.468267] ? __mutex_unlock_slowpath+0x75/0x780 [ 2005.473120] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2005.478164] ? handle_rdmsr+0x6b0/0x6b0 [ 2005.482153] kvm_vm_ioctl+0x49c/0x1430 [ 2005.486067] ? __lock_acquire+0x5f7/0x4620 [ 2005.490322] ? kvm_vcpu_release+0xa0/0xa0 [ 2005.494487] ? check_preemption_disabled+0x35/0x240 [ 2005.499609] ? perf_trace_lock+0x109/0x4b0 [ 2005.503861] ? check_preemption_disabled+0x35/0x240 [ 2005.508893] ? perf_trace_lock+0x109/0x4b0 [ 2005.513148] ? save_trace+0x290/0x290 [ 2005.516985] ? SOFTIRQ_verbose+0x10/0x10 [ 2005.521063] ? kvm_vcpu_release+0xa0/0xa0 [ 2005.525224] do_vfs_ioctl+0x75a/0xfe0 [ 2005.529150] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2005.533922] ? ioctl_preallocate+0x1a0/0x1a0 [ 2005.538364] ? security_file_ioctl+0x76/0xb0 [ 2005.542808] ? security_file_ioctl+0x83/0xb0 [ 2005.547259] SyS_ioctl+0x7f/0xb0 [ 2005.550640] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2005.554654] do_syscall_64+0x1d5/0x640 [ 2005.558580] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2005.563779] RIP: 0033:0x45c829 [ 2005.567085] RSP: 002b:00007fd87d523c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2005.574807] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2005.582110] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2005.589392] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 12:20:07 executing program 5: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace(0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000100", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRESHEX, @ANYRES32=0x0, @ANYRESOCT=r1], 0x7, 0x0) setuid(0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)="b0a68e360650", 0x6, 0x0, 0x0, 0x0) close(r3) 12:20:07 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e6, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x834, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0xfffffffd) poll(0x0, 0x0, 0x8000000000000200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = inotify_init1(0x0) splice(r3, 0x0, r2, 0x0, 0x39, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2005.596679] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2005.603976] R13: 0000000000000390 R14: 00000000004c605c R15: 00007fd87d5246d4 [ 2005.628283] warn_alloc_show_mem: 1 callbacks suppressed [ 2005.628287] Mem-Info: [ 2005.630880] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2005.640748] active_anon:571768 inactive_anon:181591 isolated_anon:0 [ 2005.640748] active_file:32834 inactive_file:50545 isolated_file:0 [ 2005.640748] unevictable:7713 dirty:154 writeback:0 unstable:0 [ 2005.640748] slab_reclaimable:17276 slab_unreclaimable:134853 [ 2005.640748] mapped:66480 shmem:12031 pagetables:20828 bounce:0 [ 2005.640748] free:496694 free_pcp:479 free_cma:0 [ 2005.705564] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2005.722350] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:204kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2005.742247] CPU: 1 PID: 13535 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 2005.760926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2005.764932] Node 1 active_anon:866964kB inactive_anon:344500kB active_file:131084kB inactive_file:201976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35232kB dirty:576kB writeback:0kB shmem:10408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2005.770289] Call Trace: [ 2005.770311] dump_stack+0x13e/0x194 [ 2005.770329] warn_alloc.cold+0x96/0x1af [ 2005.770341] ? zone_watermark_ok_safe+0x280/0x280 [ 2005.770366] ? wait_for_completion+0x390/0x390 [ 2005.770382] __alloc_pages_slowpath+0x2114/0x26c0 [ 2005.770408] ? warn_alloc+0xf0/0xf0 [ 2005.770419] ? find_held_lock+0x2d/0x110 [ 2005.770431] ? fs_reclaim_acquire+0x10/0x10 [ 2005.770455] __alloc_pages_nodemask+0x5d3/0x700 [ 2005.770471] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2005.804918] Node 0 [ 2005.805496] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2005.805508] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2005.805535] alloc_pages_current+0xe7/0x1e0 [ 2005.805554] kvm_mmu_create+0xd1/0x1c0 [ 2005.810481] DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2005.814384] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2005.814398] ? alloc_pages_current+0xef/0x1e0 [ 2005.814413] kvm_vcpu_init+0x26d/0x360 [ 2005.814430] vmx_create_vcpu+0xf3/0x2900 [ 2005.814448] ? __mutex_unlock_slowpath+0x75/0x780 [ 2005.814470] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2005.819893] lowmem_reserve[]: [ 2005.823915] ? handle_rdmsr+0x6b0/0x6b0 [ 2005.823937] kvm_vm_ioctl+0x49c/0x1430 [ 2005.823955] ? __lock_acquire+0x5f7/0x4620 [ 2005.823966] ? kvm_vcpu_release+0xa0/0xa0 [ 2005.823979] ? check_preemption_disabled+0x35/0x240 [ 2005.827957] 0 [ 2005.831833] ? perf_trace_lock+0x109/0x4b0 [ 2005.831850] ? check_preemption_disabled+0x35/0x240 [ 2005.831861] ? perf_trace_lock+0x109/0x4b0 [ 2005.831872] ? save_trace+0x290/0x290 [ 2005.831882] ? SOFTIRQ_verbose+0x10/0x10 [ 2005.831899] ? kvm_vcpu_release+0xa0/0xa0 [ 2005.831913] do_vfs_ioctl+0x75a/0xfe0 [ 2005.831930] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2005.831944] ? ioctl_preallocate+0x1a0/0x1a0 [ 2005.831971] ? security_file_ioctl+0x76/0xb0 [ 2005.831980] ? security_file_ioctl+0x83/0xb0 [ 2005.832001] SyS_ioctl+0x7f/0xb0 [ 2005.832015] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2005.841914] 2557 [ 2005.846056] do_syscall_64+0x1d5/0x640 [ 2005.846081] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2005.846091] RIP: 0033:0x45c829 [ 2005.846097] RSP: 002b:00007f615e1f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2005.846109] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2005.846115] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2005.846124] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2005.849318] 2557 [ 2005.853314] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2005.853321] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f615e1f76d4 12:20:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020901020000000000000000070000020c000480080001400000ffff0900010073797a30000000000900010073797a31000000000800064000000000080003400000003f08000540000000121800020006000340000100000c000280050001008800000003312bbba383f2adc562b8753d872bf6ea11b2e754e519a66c2a17af8d60c7a74de252d7418270e383b5e6e953312b504d91bd089652dedf9519534f26a4ed5288eccced937f4663a2a00a086e6738f7febff9b0ae963bda6a1f89c8ea719113793e419d6ac187bfdcb402e15fd3e4e0b6ee03b29796ef530112d027e0ce74471d2e73577c6bfe7035c2"], 0x68}, 0x1, 0x0, 0x0, 0x881}, 0xc080) [ 2006.110410] 2557 2557 [ 2006.112965] Node 0 DMA32 free:16620kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:260kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16512kB pagetables:55444kB bounce:0kB free_pcp:800kB local_pcp:724kB free_cma:0kB 12:20:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x3}}, 0x26) dup3(r0, r1, 0x0) 12:20:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x40}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) 12:20:07 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 2006.165823] lowmem_reserve[]: 0 0 0 0 0 [ 2006.171092] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 12:20:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) 12:20:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') io_cancel(0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw6\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 2006.274816] lowmem_reserve[]: 0 0 0 0 0 [ 2006.304159] Node 1 Normal free:1972068kB min:53612kB low:67012kB high:80412kB active_anon:853708kB inactive_anon:344500kB active_file:131084kB inactive_file:201988kB unevictable:0kB writepending:704kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15808kB pagetables:28096kB bounce:0kB free_pcp:1056kB local_pcp:512kB free_cma:0kB 12:20:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0x9, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:20:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') io_cancel(0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw6\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 12:20:08 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, 0x0) [ 2006.547260] lowmem_reserve[]: 0 0 0 0 0 [ 2006.569055] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2006.572997] Node 0 DMA: 5*4kB (UMEH) 3*8kB (UE) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10316kB [ 2006.617901] syz-executor.1 cpuset= [ 2006.630567] Node 0 DMA32: 616*4kB (MEH) 432*8kB (UMEH) 208*16kB (UMEH) 88*32kB (UMH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 16544kB [ 2006.647064] / [ 2006.689430] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2006.698016] mems_allowed=0-1 [ 2006.715928] Node 1 Normal: 184*4kB (U) 241*8kB (UM) 266*16kB (UE) 391*32kB (UE) 273*64kB (UME) 33*128kB (UME) 120*256kB (UME) 71*512kB (UME) 20*1024kB (UME) 2*2048kB (UM) 448*4096kB (UM) = 1967784kB [ 2006.739413] CPU: 1 PID: 13595 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 2006.742536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2006.747322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2006.747328] Call Trace: [ 2006.747349] dump_stack+0x13e/0x194 [ 2006.747365] warn_alloc.cold+0x96/0x1af [ 2006.776113] ? zone_watermark_ok_safe+0x280/0x280 [ 2006.777723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2006.781342] ? wait_for_completion+0x390/0x390 [ 2006.781361] __alloc_pages_slowpath+0x2114/0x26c0 [ 2006.781392] ? warn_alloc+0xf0/0xf0 [ 2006.781404] ? find_held_lock+0x2d/0x110 [ 2006.781416] ? fs_reclaim_acquire+0x10/0x10 [ 2006.781441] __alloc_pages_nodemask+0x5d3/0x700 [ 2006.781455] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2006.781464] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2006.781474] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2006.781498] alloc_pages_current+0xe7/0x1e0 [ 2006.818613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2006.821414] kvm_mmu_create+0xd1/0x1c0 [ 2006.821429] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2006.821440] ? alloc_pages_current+0xef/0x1e0 [ 2006.821454] kvm_vcpu_init+0x26d/0x360 [ 2006.839412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2006.844658] vmx_create_vcpu+0xf3/0x2900 [ 2006.844678] ? __mutex_unlock_slowpath+0x75/0x780 [ 2006.844691] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2006.844704] ? handle_rdmsr+0x6b0/0x6b0 [ 2006.866774] 93413 total pagecache pages [ 2006.870298] kvm_vm_ioctl+0x49c/0x1430 [ 2006.870315] ? __lock_acquire+0x5f7/0x4620 [ 2006.870327] ? kvm_vcpu_release+0xa0/0xa0 [ 2006.870338] ? check_preemption_disabled+0x35/0x240 [ 2006.870352] ? perf_trace_lock+0x109/0x4b0 [ 2006.870366] ? check_preemption_disabled+0x35/0x240 [ 2006.870380] ? perf_trace_lock+0x109/0x4b0 [ 2006.870393] ? save_trace+0x290/0x290 [ 2006.870403] ? SOFTIRQ_verbose+0x10/0x10 [ 2006.870418] ? kvm_vcpu_release+0xa0/0xa0 [ 2006.870432] do_vfs_ioctl+0x75a/0xfe0 [ 2006.891637] 0 pages in swap cache [ 2006.892296] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2006.905236] Swap cache stats: add 0, delete 0, find 0/0 [ 2006.909859] ? ioctl_preallocate+0x1a0/0x1a0 [ 2006.909887] ? security_file_ioctl+0x76/0xb0 [ 2006.909896] ? security_file_ioctl+0x83/0xb0 [ 2006.909909] SyS_ioctl+0x7f/0xb0 [ 2006.909920] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2006.909934] do_syscall_64+0x1d5/0x640 [ 2006.909954] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2006.909964] RIP: 0033:0x45c829 [ 2006.909970] RSP: 002b:00007f615e1f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2006.909982] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2006.909989] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2006.909995] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2006.910000] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2006.910006] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f615e1f76d4 [ 2007.088227] Free swap = 0kB [ 2007.091732] Total swap = 0kB [ 2007.094923] 1965979 pages RAM [ 2007.099968] 0 pages HighMem/MovableOnly [ 2007.104045] 339050 pages reserved [ 2007.107583] 0 pages cma reserved 12:20:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001c000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x0, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:20:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') io_cancel(0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw6\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 12:20:08 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000000000002bc55400fbff000000000000d800000000000000d8000000a4010000a4010000a4010000a4010000a411000003"], 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 12:20:08 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 12:20:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) 12:20:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001c000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x0, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:20:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') io_cancel(0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw6\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 2007.382235] warn_alloc_show_mem: 1 callbacks suppressed [ 2007.382243] Mem-Info: [ 2007.415818] active_anon:569850 inactive_anon:181591 isolated_anon:0 [ 2007.415818] active_file:32834 inactive_file:50348 isolated_file:0 [ 2007.415818] unevictable:7713 dirty:203 writeback:0 unstable:0 [ 2007.415818] slab_reclaimable:17323 slab_unreclaimable:135359 [ 2007.415818] mapped:66673 shmem:12031 pagetables:20905 bounce:0 [ 2007.415818] free:498173 free_pcp:616 free_cma:0 12:20:09 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000002400)=[{0x0, 0x0, 0xfffffffffffeffff}, {&(0x7f0000000400)="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", 0x12e, 0xa6}]) 12:20:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000013c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x81000000}}]}]}]}, 0x34}}, 0x0) [ 2007.520079] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:260kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2007.587869] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2007.609548] Node 1 active_anon:864792kB inactive_anon:344500kB active_file:131084kB inactive_file:201132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36104kB dirty:772kB writeback:0kB shmem:10408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2007.635289] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2007.678312] CPU: 1 PID: 13631 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 2007.686278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2007.695648] Call Trace: [ 2007.698257] dump_stack+0x13e/0x194 [ 2007.701909] warn_alloc.cold+0x96/0x1af [ 2007.704526] Node 0 [ 2007.705924] ? zone_watermark_ok_safe+0x280/0x280 [ 2007.705950] DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2007.708216] ? wait_for_completion+0x390/0x390 [ 2007.708233] __alloc_pages_slowpath+0x2114/0x26c0 [ 2007.708260] ? warn_alloc+0xf0/0xf0 [ 2007.708272] ? find_held_lock+0x2d/0x110 [ 2007.708282] ? fs_reclaim_acquire+0x10/0x10 [ 2007.708307] __alloc_pages_nodemask+0x5d3/0x700 [ 2007.708328] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2007.708337] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2007.708348] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2007.708372] alloc_pages_current+0xe7/0x1e0 [ 2007.717110] lowmem_reserve[]: [ 2007.742019] kvm_mmu_create+0xd1/0x1c0 [ 2007.742035] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2007.742046] ? alloc_pages_current+0xef/0x1e0 [ 2007.742059] kvm_vcpu_init+0x26d/0x360 [ 2007.742072] vmx_create_vcpu+0xf3/0x2900 [ 2007.742090] ? __mutex_unlock_slowpath+0x75/0x780 [ 2007.742101] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2007.742113] ? handle_rdmsr+0x6b0/0x6b0 [ 2007.742131] kvm_vm_ioctl+0x49c/0x1430 [ 2007.742146] ? __lock_acquire+0x5f7/0x4620 [ 2007.742157] ? kvm_vcpu_release+0xa0/0xa0 [ 2007.742169] ? check_preemption_disabled+0x35/0x240 [ 2007.742183] ? perf_trace_lock+0x109/0x4b0 [ 2007.742196] ? check_preemption_disabled+0x35/0x240 [ 2007.742209] ? perf_trace_lock+0x109/0x4b0 [ 2007.742222] ? save_trace+0x290/0x290 [ 2007.742233] ? SOFTIRQ_verbose+0x10/0x10 [ 2007.742249] ? kvm_vcpu_release+0xa0/0xa0 [ 2007.742264] do_vfs_ioctl+0x75a/0xfe0 [ 2007.742276] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2007.742289] ? ioctl_preallocate+0x1a0/0x1a0 [ 2007.742313] ? security_file_ioctl+0x76/0xb0 [ 2007.742324] ? security_file_ioctl+0x83/0xb0 [ 2007.742338] SyS_ioctl+0x7f/0xb0 [ 2007.742348] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2007.742362] do_syscall_64+0x1d5/0x640 [ 2007.742380] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2007.742390] RIP: 0033:0x45c829 [ 2007.742397] RSP: 002b:00007fd87d523c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2007.742409] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2007.742415] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2007.742422] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2007.742428] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2007.742434] R13: 0000000000000390 R14: 00000000004c605c R15: 00007fd87d5246d4 [ 2008.036313] 0 2557 2557 2557 2557 [ 2008.040743] Node 0 DMA32 free:23360kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:232kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16512kB pagetables:55444kB bounce:0kB free_pcp:1040kB local_pcp:620kB free_cma:0kB [ 2008.080247] lowmem_reserve[]: 0 0 0 0 0 [ 2008.084304] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2008.129572] lowmem_reserve[]: 0 0 0 0 0 [ 2008.133629] Node 1 Normal free:1958268kB min:53612kB low:67012kB high:80412kB active_anon:853520kB inactive_anon:344500kB active_file:132044kB inactive_file:201088kB unevictable:0kB writepending:788kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15552kB pagetables:27752kB bounce:0kB free_pcp:1144kB local_pcp:632kB free_cma:0kB [ 2008.228164] lowmem_reserve[]: 0 0 0 0 0 [ 2008.232234] Node 0 DMA: 5*4kB (UMEH) 3*8kB (UE) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10316kB [ 2008.254094] Node 0 DMA32: 1770*4kB (UMEH) 616*8kB (UMEH) 228*16kB (UMEH) 98*32kB (UMH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 23272kB [ 2008.272630] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2008.284378] Node 1 Normal: 427*4kB (UM) 163*8kB (UME) 63*16kB (UME) 213*32kB (UME) 304*64kB (UME) 33*128kB (ME) 117*256kB (UME) 71*512kB (UME) 19*1024kB (UE) 2*2048kB (UM) 448*4096kB (UM) = 1959380kB [ 2008.303475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2008.313508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2008.322994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2008.332720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2008.348863] 93432 total pagecache pages [ 2008.352927] 0 pages in swap cache [ 2008.356384] Swap cache stats: add 0, delete 0, find 0/0 [ 2008.364928] Free swap = 0kB [ 2008.369463] Total swap = 0kB [ 2008.372500] 1965979 pages RAM 12:20:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0x9, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:20:10 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7132}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) dup2(r0, r1) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x2000ff8e}]) 12:20:10 executing program 2: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x0, 0x0) creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) 12:20:10 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 12:20:10 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='E'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)) [ 2008.375606] 0 pages HighMem/MovableOnly [ 2008.381471] 339050 pages reserved [ 2008.385031] 0 pages cma reserved [ 2008.607368] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2008.666173] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2008.689383] CPU: 0 PID: 13663 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 2008.697407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2008.707350] Call Trace: [ 2008.709983] dump_stack+0x13e/0x194 [ 2008.713647] warn_alloc.cold+0x96/0x1af [ 2008.717643] ? zone_watermark_ok_safe+0x280/0x280 [ 2008.722525] ? wait_for_completion+0x390/0x390 [ 2008.728359] __alloc_pages_slowpath+0x2114/0x26c0 [ 2008.733239] ? warn_alloc+0xf0/0xf0 [ 2008.736882] ? find_held_lock+0x2d/0x110 [ 2008.741057] ? fs_reclaim_acquire+0x10/0x10 [ 2008.745408] __alloc_pages_nodemask+0x5d3/0x700 [ 2008.750269] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2008.755301] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2008.760322] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2008.765382] alloc_pages_current+0xe7/0x1e0 [ 2008.769746] kvm_mmu_create+0xd1/0x1c0 [ 2008.773671] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2008.778019] ? alloc_pages_current+0xef/0x1e0 [ 2008.782534] kvm_vcpu_init+0x26d/0x360 [ 2008.786533] vmx_create_vcpu+0xf3/0x2900 [ 2008.791599] ? __mutex_unlock_slowpath+0x75/0x780 [ 2008.796667] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2008.802318] ? handle_rdmsr+0x6b0/0x6b0 [ 2008.806405] kvm_vm_ioctl+0x49c/0x1430 [ 2008.810330] ? __lock_acquire+0x5f7/0x4620 [ 2008.814699] ? kvm_vcpu_release+0xa0/0xa0 [ 2008.818946] ? check_preemption_disabled+0x35/0x240 [ 2008.823978] ? perf_trace_lock+0x109/0x4b0 [ 2008.828336] ? check_preemption_disabled+0x35/0x240 [ 2008.833375] ? perf_trace_lock+0x109/0x4b0 [ 2008.837710] ? save_trace+0x290/0x290 [ 2008.841520] ? SOFTIRQ_verbose+0x10/0x10 [ 2008.846556] ? kvm_vcpu_release+0xa0/0xa0 [ 2008.850732] do_vfs_ioctl+0x75a/0xfe0 [ 2008.854548] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2008.859320] ? ioctl_preallocate+0x1a0/0x1a0 [ 2008.863766] ? security_file_ioctl+0x76/0xb0 [ 2008.868201] ? security_file_ioctl+0x83/0xb0 [ 2008.872622] SyS_ioctl+0x7f/0xb0 [ 2008.876085] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2008.880082] do_syscall_64+0x1d5/0x640 [ 2008.884844] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2008.890086] RIP: 0033:0x45c829 [ 2008.893292] RSP: 002b:00007f615e1f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2008.901030] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2008.908844] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2008.916934] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2008.924314] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2008.931699] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f615e1f76d4 [ 2009.041837] warn_alloc_show_mem: 1 callbacks suppressed [ 2009.041842] Mem-Info: [ 2009.053216] active_anon:568786 inactive_anon:181590 isolated_anon:0 [ 2009.053216] active_file:32816 inactive_file:50573 isolated_file:0 [ 2009.053216] unevictable:7713 dirty:216 writeback:2 unstable:0 [ 2009.053216] slab_reclaimable:17386 slab_unreclaimable:136464 [ 2009.053216] mapped:66511 shmem:12031 pagetables:20838 bounce:0 [ 2009.053216] free:497202 free_pcp:578 free_cma:0 [ 2009.096963] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:260kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2009.135116] Node 1 active_anon:853560kB inactive_anon:344500kB active_file:131084kB inactive_file:202072kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35300kB dirty:884kB writeback:0kB shmem:10408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2009.173872] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2009.209134] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2009.214217] Node 0 DMA32 free:21212kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:260kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16512kB pagetables:55444kB bounce:0kB free_pcp:808kB local_pcp:652kB free_cma:0kB [ 2009.252849] lowmem_reserve[]: 0 0 0 0 0 [ 2009.256953] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2009.289997] lowmem_reserve[]: 0 0 0 0 0 [ 2009.294063] Node 1 Normal free:1957512kB min:53612kB low:67012kB high:80412kB active_anon:853560kB inactive_anon:344500kB active_file:131084kB inactive_file:202072kB unevictable:0kB writepending:884kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15680kB pagetables:27836kB bounce:0kB free_pcp:1308kB local_pcp:660kB free_cma:0kB [ 2009.336657] lowmem_reserve[]: 0 0 0 0 0 [ 2009.341191] Node 0 DMA: 5*4kB (UMEH) 3*8kB (UE) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10316kB [ 2009.367712] Node 0 DMA32: 1045*4kB (UMEH) 623*8kB (UMEH) 232*16kB (UMEH) 105*32kB (UMH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 20716kB [ 2009.391403] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2009.405383] Node 1 Normal: 242*4kB (UM) 390*8kB (UME) 42*16kB (UME) 175*32kB (UME) 304*64kB (UME) 33*128kB (ME) 116*256kB (UME) 71*512kB (UME) 19*1024kB (UE) 2*2048kB (UM) 448*4096kB (UM) = 1958648kB [ 2009.433612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2009.445827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2009.463022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2009.473444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2009.490053] 93429 total pagecache pages [ 2009.494112] 0 pages in swap cache [ 2009.497812] Swap cache stats: add 0, delete 0, find 0/0 [ 2009.513836] Free swap = 0kB [ 2009.517396] Total swap = 0kB [ 2009.521923] 1965979 pages RAM [ 2009.525284] 0 pages HighMem/MovableOnly [ 2009.536905] 339050 pages reserved [ 2009.541355] 0 pages cma reserved 12:20:11 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:20:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e) 12:20:11 executing program 0: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4000ae172, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @dev}, 0x10) 12:20:11 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7132}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) dup2(r0, r1) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x2000ff8e}]) 12:20:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2]}, 0x45c) 12:20:11 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="45e9aed12f060000000000000025d8", 0xf}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 12:20:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0) 12:20:12 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="45e9aed12f060000000000000025d8", 0xf}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 2010.269746] ptrace attach of "/root/syz-executor.1"[13691] was attempted by "/root/syz-executor.1"[13697] [ 2010.275197] audit: type=1804 audit(1587471611.981:4999): pid=13698 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2490/bus" dev="sda1" ino=17001 res=1 12:20:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) dup2(r0, r1) 12:20:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40505330, &(0x7f0000000100)={0xbf000300}) 12:20:12 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x3}, 0x1c) 12:20:12 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7132}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) dup2(r0, r1) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x2000ff8e}]) [ 2010.465104] audit: type=1804 audit(1587471611.981:5000): pid=13698 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2490/bus" dev="sda1" ino=17001 res=1 12:20:12 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:20:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) dup2(r0, r1) 12:20:12 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 12:20:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 12:20:12 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7132}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) dup2(r0, r1) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x2000ff8e}]) [ 2010.541922] audit: type=1804 audit(1587471612.071:5001): pid=13698 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2490/bus" dev="sda1" ino=17001 res=1 12:20:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) dup2(r0, r1) 12:20:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 2010.700378] audit: type=1804 audit(1587471612.081:5002): pid=13698 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2490/bus" dev="sda1" ino=17001 res=1 [ 2010.851161] audit: type=1804 audit(1587471612.381:5003): pid=13734 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2491/bus" dev="sda1" ino=16107 res=1 [ 2010.979951] audit: type=1804 audit(1587471612.391:5004): pid=13734 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2491/bus" dev="sda1" ino=16107 res=1 12:20:15 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="45e9aed12f060000000000000025d8", 0xf}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 12:20:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) dup2(r0, r1) 12:20:15 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:20:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 12:20:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 12:20:15 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 12:20:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x9d, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000000000}, 0x40289, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) listen(0xffffffffffffffff, 0x400) r0 = creat(0x0, 0x10d) io_setup(0xd33, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000180)={0x100000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1, 0x0, 0x8003}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000000)=0x6e) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x18e1, 0x2}) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x840, 0x4f1b7dbbfa0e1685, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x2}, 0x4000, 0x0, 0x9, 0x0, 0x400, 0xc, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') socket(0x0, 0x0, 0x0) setns(r1, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x10) [ 2013.446406] audit: type=1804 audit(1587471615.151:5005): pid=13756 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2492/bus" dev="sda1" ino=16975 res=1 12:20:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 12:20:15 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2013.531571] audit: type=1804 audit(1587471615.161:5006): pid=13756 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2492/bus" dev="sda1" ino=16975 res=1 12:20:15 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="45e9aed12f060000000000000025d8", 0xf}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 2013.594325] ptrace attach of "/root/syz-executor.1"[13764] was attempted by "/root/syz-executor.1"[13770] 12:20:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000040)={0x43, 0x9, 0x0, {0x0, 0x0, 0xe98, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2ffb7b34}}, 0x43) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) dup(0xffffffffffffffff) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 2013.767408] audit: type=1804 audit(1587471615.461:5007): pid=13777 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2493/bus" dev="sda1" ino=16144 res=1 [ 2013.809767] audit: type=1804 audit(1587471615.471:5008): pid=13777 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir656918151/syzkaller.POdn7w/2493/bus" dev="sda1" ino=16144 res=1 12:20:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x9d, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000000000}, 0x40289, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) listen(0xffffffffffffffff, 0x400) r0 = creat(0x0, 0x10d) io_setup(0xd33, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000180)={0x100000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1, 0x0, 0x8003}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000000)=0x6e) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x18e1, 0x2}) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x840, 0x4f1b7dbbfa0e1685, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x2}, 0x4000, 0x0, 0x9, 0x0, 0x400, 0xc, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') socket(0x0, 0x0, 0x0) setns(r1, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 12:20:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299b67b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:20:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 12:20:16 executing program 4: r0 = socket(0x9, 0x2, 0x0) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x80000) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000280)={'filter\x00'}, &(0x7f00000001c0)=0x78) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380)=[@window={0x3, 0x3, 0x6}, @window={0x3, 0x871e, 0x8}, @window={0x3, 0x6, 0x3}, @window={0x3, 0x400, 0x5}, @mss={0x2, 0x7}], 0x5) socket$netlink(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x88) 12:20:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 12:20:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000853e673e5a000000000000000100", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004000000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 12:20:16 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 12:20:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299b67b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:20:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x9d, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000000000}, 0x40289, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) listen(0xffffffffffffffff, 0x400) r0 = creat(0x0, 0x10d) io_setup(0xd33, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000180)={0x100000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1, 0x0, 0x8003}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000000)=0x6e) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x18e1, 0x2}) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x840, 0x4f1b7dbbfa0e1685, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x2}, 0x4000, 0x0, 0x9, 0x0, 0x400, 0xc, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') socket(0x0, 0x0, 0x0) setns(r1, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x10) [ 2014.849993] bond5 (unregistering): Released all slaves 12:20:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299b67b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 2015.425856] bond5 (unregistering): Released all slaves 12:20:18 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 12:20:18 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e11f939f0265c321aba72a56c8", 0xca}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="4ed0e87206570883818878"], 0xb}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 12:20:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 12:20:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x9d, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000000000}, 0x40289, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) listen(0xffffffffffffffff, 0x400) r0 = creat(0x0, 0x10d) io_setup(0xd33, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000180)={0x100000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1, 0x0, 0x8003}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000000)=0x6e) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x18e1, 0x2}) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x840, 0x4f1b7dbbfa0e1685, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x2}, 0x4000, 0x0, 0x9, 0x0, 0x400, 0xc, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') socket(0x0, 0x0, 0x0) setns(r1, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 12:20:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/46, 0x2e}], 0x1}}], 0x1, 0x0, 0x0) 12:20:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299b67b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:20:18 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e11f939f0265c321aba72a56c8", 0xca}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="4ed0e87206570883818878"], 0xb}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 12:20:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x3a8) 12:20:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r2, 0x80045440, &(0x7f0000000040)) 12:20:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0x4004550c, 0x0) 12:20:18 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000640)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 12:20:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r2, 0x80045440, &(0x7f0000000040)) [ 2017.574268] ceph: No mds server is up or the cluster is laggy [ 2017.587418] ceph: No mds server is up or the cluster is laggy 12:20:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r2, 0x80045440, &(0x7f0000000040)) 12:20:19 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)) socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 12:20:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 12:20:19 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000640)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 12:20:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="b785bddcf97f3ff91a7d503d6659d20b8be13ae064c990a0026866c0c522be0bde8c973282ef1b4b8239feb685402ffe", 0x30) r2 = accept$alg(r1, 0x0, 0x0) read(r2, &(0x7f0000000200)=""/86, 0x2e9) 12:20:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r2, 0x80045440, &(0x7f0000000040)) [ 2018.033926] ceph: No mds server is up or the cluster is laggy 12:20:21 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e11f939f0265c321aba72a56c8", 0xca}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="4ed0e87206570883818878"], 0xb}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 12:20:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8020600) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') lseek(r3, 0x0, 0x0) 12:20:21 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000640)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 12:20:21 executing program 2: r0 = socket(0x22, 0x2, 0x2) recvfrom$llc(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 12:20:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0xfffffffffffffffe) 12:20:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800050000000000419c7269602600000000e73be0e0d34551043d7b2c369d94ef57b4d19be18516558d83c870543d671cef03f1b4e2e95f8b7a4f5ba63b000000d3aaf5bb578155d4fc0ceb9d2d6c2e106635ea26a66773722b3f000000000000"], 0x3c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 12:20:21 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getpeername(r0, 0x0, 0x0) 12:20:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0xfffffffffffffffe) 12:20:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0xfffffffffffffffe) 12:20:21 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getpeername(r0, 0x0, 0x0) 12:20:21 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000640)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 12:20:21 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x7, 0x4}) [ 2020.243143] ceph: No mds server is up or the cluster is laggy [ 2020.494027] ceph: No mds server is up or the cluster is laggy 12:20:24 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e11f939f0265c321aba72a56c8", 0xca}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="4ed0e87206570883818878"], 0xb}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 12:20:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800050000000000419c7269602600000000e73be0e0d34551043d7b2c369d94ef57b4d19be18516558d83c870543d671cef03f1b4e2e95f8b7a4f5ba63b000000d3aaf5bb578155d4fc0ceb9d2d6c2e106635ea26a66773722b3f000000000000"], 0x3c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 12:20:24 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getpeername(r0, 0x0, 0x0) 12:20:24 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000100)=0x5ed, 0x4) 12:20:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0xfffffffffffffffe) 12:20:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0xa01, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 12:20:24 executing program 5: r0 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(r0, &(0x7f0000003400)=[{{&(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000001500)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 12:20:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xffffffff}}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0) 12:20:24 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getpeername(r0, 0x0, 0x0) 12:20:24 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) pipe2(0x0, 0x4000) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:20:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x5, 0xfffffffffffffee1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="66b9800000c00f326635000400000f3066b9024d564b0f320f01c40f217566b9b803000066b864d0c5f266ba000000000f3066b9130000000f32baf80c66b806a21e8766efbafc0cb8c50f0173000f01c2b82f000f00d8", 0x57}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) 12:20:24 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r2, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, r3, 0x0) socket(0x0, 0x2, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x0) [ 2023.385130] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2023.450880] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2023.478438] CPU: 1 PID: 14292 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 2023.486380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2023.495754] Call Trace: [ 2023.498371] dump_stack+0x13e/0x194 [ 2023.502105] warn_alloc.cold+0x96/0x1af [ 2023.506093] ? zone_watermark_ok_safe+0x280/0x280 [ 2023.510959] ? wait_for_completion+0x390/0x390 [ 2023.515556] __alloc_pages_slowpath+0x2114/0x26c0 [ 2023.520436] ? warn_alloc+0xf0/0xf0 [ 2023.524077] ? find_held_lock+0x2d/0x110 [ 2023.528155] ? fs_reclaim_acquire+0x10/0x10 [ 2023.532609] __alloc_pages_nodemask+0x5d3/0x700 [ 2023.537304] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2023.542357] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2023.547375] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2023.552428] alloc_pages_current+0xe7/0x1e0 [ 2023.556900] kvm_mmu_create+0xd1/0x1c0 [ 2023.560806] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2023.565281] ? alloc_pages_current+0xef/0x1e0 [ 2023.569800] kvm_vcpu_init+0x26d/0x360 [ 2023.573713] vmx_create_vcpu+0xf3/0x2900 [ 2023.577797] ? __mutex_unlock_slowpath+0x75/0x780 [ 2023.582655] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2023.587687] ? handle_rdmsr+0x6b0/0x6b0 [ 2023.591670] kvm_vm_ioctl+0x49c/0x1430 [ 2023.595560] ? __lock_acquire+0x5f7/0x4620 [ 2023.599796] ? kvm_vcpu_release+0xa0/0xa0 [ 2023.603943] ? check_preemption_disabled+0x35/0x240 [ 2023.609048] ? perf_trace_lock+0x109/0x4b0 [ 2023.613285] ? check_preemption_disabled+0x35/0x240 [ 2023.618321] ? perf_trace_lock+0x109/0x4b0 [ 2023.622577] ? save_trace+0x290/0x290 [ 2023.626378] ? SOFTIRQ_verbose+0x10/0x10 [ 2023.630444] ? kvm_vcpu_release+0xa0/0xa0 [ 2023.634595] do_vfs_ioctl+0x75a/0xfe0 [ 2023.638409] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2023.643185] ? ioctl_preallocate+0x1a0/0x1a0 [ 2023.647657] ? security_file_ioctl+0x76/0xb0 [ 2023.652077] ? security_file_ioctl+0x83/0xb0 [ 2023.656492] SyS_ioctl+0x7f/0xb0 [ 2023.659870] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2023.663867] do_syscall_64+0x1d5/0x640 [ 2023.667765] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2023.673083] RIP: 0033:0x45c829 [ 2023.676327] RSP: 002b:00007f0f9d46cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2023.684050] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2023.691328] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2023.698727] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2023.706002] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2023.713386] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f0f9d46d6d4 [ 2023.803693] Mem-Info: [ 2023.806389] active_anon:568980 inactive_anon:181591 isolated_anon:0 [ 2023.806389] active_file:32834 inactive_file:50584 isolated_file:0 [ 2023.806389] unevictable:7713 dirty:291 writeback:0 unstable:0 [ 2023.806389] slab_reclaimable:17408 slab_unreclaimable:130878 [ 2023.806389] mapped:66527 shmem:12031 pagetables:20934 bounce:0 [ 2023.806389] free:502470 free_pcp:728 free_cma:0 [ 2023.849990] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:232kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2023.879159] Node 1 active_anon:854412kB inactive_anon:344500kB active_file:131084kB inactive_file:202104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35420kB dirty:1124kB writeback:0kB shmem:10408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2023.912998] Node 0 DMA free:10296kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2023.940729] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2023.946062] Node 0 DMA32 free:21764kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:232kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16512kB pagetables:55444kB bounce:0kB free_pcp:1456kB local_pcp:736kB free_cma:0kB [ 2023.981571] lowmem_reserve[]: 0 0 0 0 0 [ 2023.985917] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2024.019112] lowmem_reserve[]: 0 0 0 0 0 [ 2024.023454] Node 1 Normal free:1978744kB min:53612kB low:67012kB high:80412kB active_anon:854412kB inactive_anon:344500kB active_file:131084kB inactive_file:202104kB unevictable:0kB writepending:1124kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:16096kB pagetables:28292kB bounce:0kB free_pcp:1308kB local_pcp:656kB free_cma:0kB [ 2024.058566] lowmem_reserve[]: 0 0 0 0 0 [ 2024.062893] Node 0 DMA: 4*4kB (UMEH) 1*8kB (E) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10296kB [ 2024.083874] Node 0 DMA32: 1459*4kB (UMEH) 1077*8kB (UMEH) 181*16kB (UMEH) 27*32kB (UMH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 22692kB [ 2024.113421] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2024.124909] Node 1 Normal: 138*4kB (UME) 118*8kB (UME) 642*16kB (UME) 567*32kB (UME) 296*64kB (UME) 77*128kB (UME) 122*256kB (UME) 73*512kB (UME) 21*1024kB (UME) 2*2048kB (UM) 446*4096kB (UM) = 1979736kB [ 2024.209855] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2024.239701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2024.253407] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2024.253874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2024.272965] CPU: 1 PID: 14297 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 2024.272997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2024.280878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2024.280884] Call Trace: [ 2024.280905] dump_stack+0x13e/0x194 [ 2024.280921] warn_alloc.cold+0x96/0x1af [ 2024.280932] ? zone_watermark_ok_safe+0x280/0x280 [ 2024.280957] ? wait_for_completion+0x390/0x390 [ 2024.295380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2024.299370] __alloc_pages_slowpath+0x2114/0x26c0 [ 2024.299402] ? warn_alloc+0xf0/0xf0 [ 2024.299414] ? find_held_lock+0x2d/0x110 [ 2024.299426] ? fs_reclaim_acquire+0x10/0x10 [ 2024.299449] __alloc_pages_nodemask+0x5d3/0x700 [ 2024.299464] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2024.299472] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2024.299482] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2024.299506] alloc_pages_current+0xe7/0x1e0 [ 2024.302779] 93444 total pagecache pages [ 2024.305761] kvm_mmu_create+0xd1/0x1c0 [ 2024.305777] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2024.305789] ? alloc_pages_current+0xef/0x1e0 [ 2024.305805] kvm_vcpu_init+0x26d/0x360 [ 2024.310471] 0 pages in swap cache [ 2024.314711] vmx_create_vcpu+0xf3/0x2900 [ 2024.314733] ? __mutex_unlock_slowpath+0x75/0x780 [ 2024.314754] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2024.320159] Swap cache stats: add 0, delete 0, find 0/0 [ 2024.328223] ? handle_rdmsr+0x6b0/0x6b0 [ 2024.328244] kvm_vm_ioctl+0x49c/0x1430 [ 2024.328260] ? kvm_vcpu_release+0xa0/0xa0 [ 2024.328293] ? perf_trace_run_bpf_submit+0x113/0x170 [ 2024.328310] ? check_preemption_disabled+0x35/0x240 [ 2024.333863] Free swap = 0kB [ 2024.336810] ? perf_trace_run_bpf_submit+0x113/0x170 [ 2024.336831] ? perf_trace_lock+0x2ef/0x4b0 [ 2024.336845] ? save_trace+0x290/0x290 [ 2024.341487] Total swap = 0kB [ 2024.345324] ? SOFTIRQ_verbose+0x10/0x10 [ 2024.345343] ? kvm_vcpu_release+0xa0/0xa0 [ 2024.345365] do_vfs_ioctl+0x75a/0xfe0 [ 2024.350560] 1965979 pages RAM [ 2024.355071] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2024.355087] ? ioctl_preallocate+0x1a0/0x1a0 [ 2024.355111] ? security_file_ioctl+0x76/0xb0 [ 2024.360578] 0 pages HighMem/MovableOnly [ 2024.364958] ? security_file_ioctl+0x83/0xb0 [ 2024.364975] SyS_ioctl+0x7f/0xb0 [ 2024.364987] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2024.369734] 339050 pages reserved [ 2024.373296] do_syscall_64+0x1d5/0x640 [ 2024.373319] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2024.377292] 0 pages cma reserved [ 2024.381552] RIP: 0033:0x45c829 [ 2024.381558] RSP: 002b:00007f0f9d44bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2024.381569] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2024.381575] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2024.381580] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2024.381586] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2024.381592] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f0f9d44c6d4 12:20:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() unshare(0x0) mkdir(0x0, 0x0) socket(0x0, 0x2, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x1c4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)="5c71bd96f4e2d65b4df3a2d89fbfb83197ea0e36dc593a4450c1209b80618c0271cb507061a7c367a00bf865c8d0606134f550c9ac878f5d94e94b1ac715b430419a4063f254d549ad53bc2e69ffacc0b45d82adeea4b999e0b12c9643445a4f14a84aecb175d9e9d3a6984ea7213fb64fb25a457366047cbcbb7fb4bbddd81eccffb59ad13cbad32d3c752126f015a973e11b64d4d1ca133bbc37a3a90b46ec9a13d620ac180e94ec3a1da41a840f23336635f3655e0f7bbf91995a0e6b370b35d6c2de8ca5c39325fe229d947aefc04d30f43d8242543af1c8", 0xda}, 0x68) gettid() tkill(0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') 12:20:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800050000000000419c7269602600000000e73be0e0d34551043d7b2c369d94ef57b4d19be18516558d83c870543d671cef03f1b4e2e95f8b7a4f5ba63b000000d3aaf5bb578155d4fc0ceb9d2d6c2e106635ea26a66773722b3f000000000000"], 0x3c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 12:20:27 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) pipe2(0x0, 0x4000) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:20:27 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r2, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, r3, 0x0) socket(0x0, 0x2, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x0) 12:20:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x5, 0xfffffffffffffee1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="66b9800000c00f326635000400000f3066b9024d564b0f320f01c40f217566b9b803000066b864d0c5f266ba000000000f3066b9130000000f32baf80c66b806a21e8766efbafc0cb8c50f0173000f01c2b82f000f00d8", 0x57}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) 12:20:27 executing program 1: r0 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents64(r1, &(0x7f0000001480)=""/4096, 0x1000) [ 2026.215936] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2026.288198] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2026.293387] CPU: 1 PID: 14325 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 2026.301282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2026.317967] Call Trace: [ 2026.320572] dump_stack+0x13e/0x194 [ 2026.325604] warn_alloc.cold+0x96/0x1af [ 2026.329611] ? zone_watermark_ok_safe+0x280/0x280 [ 2026.334495] ? wait_for_completion+0x390/0x390 [ 2026.339092] __alloc_pages_slowpath+0x2114/0x26c0 [ 2026.344072] ? warn_alloc+0xf0/0xf0 [ 2026.347744] ? find_held_lock+0x2d/0x110 [ 2026.351832] ? fs_reclaim_acquire+0x10/0x10 [ 2026.356213] __alloc_pages_nodemask+0x5d3/0x700 [ 2026.361010] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2026.366062] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2026.371285] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2026.376333] alloc_pages_current+0xe7/0x1e0 [ 2026.380925] kvm_mmu_create+0xd1/0x1c0 [ 2026.384845] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2026.389196] ? alloc_pages_current+0xef/0x1e0 [ 2026.393726] kvm_vcpu_init+0x26d/0x360 [ 2026.397641] vmx_create_vcpu+0xf3/0x2900 [ 2026.401833] ? __mutex_unlock_slowpath+0x75/0x780 [ 2026.406692] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2026.411768] ? handle_rdmsr+0x6b0/0x6b0 [ 2026.415795] kvm_vm_ioctl+0x49c/0x1430 [ 2026.419708] ? __lock_acquire+0x5f7/0x4620 [ 2026.423968] ? kvm_vcpu_release+0xa0/0xa0 [ 2026.428136] ? check_preemption_disabled+0x35/0x240 [ 2026.433433] ? perf_trace_lock+0x109/0x4b0 [ 2026.437697] ? check_preemption_disabled+0x35/0x240 [ 2026.442730] ? perf_trace_lock+0x109/0x4b0 [ 2026.446979] ? save_trace+0x290/0x290 [ 2026.450815] ? SOFTIRQ_verbose+0x10/0x10 [ 2026.454900] ? kvm_vcpu_release+0xa0/0xa0 [ 2026.459065] do_vfs_ioctl+0x75a/0xfe0 [ 2026.463836] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2026.468712] ? ioctl_preallocate+0x1a0/0x1a0 [ 2026.473170] ? security_file_ioctl+0x76/0xb0 [ 2026.477600] ? security_file_ioctl+0x83/0xb0 [ 2026.482025] SyS_ioctl+0x7f/0xb0 [ 2026.486534] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2026.490530] do_syscall_64+0x1d5/0x640 [ 2026.494459] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2026.499660] RIP: 0033:0x45c829 [ 2026.503115] RSP: 002b:00007f0f9d46cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2026.510990] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2026.518276] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2026.525557] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 12:20:28 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) pipe2(0x0, 0x4000) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:20:28 executing program 1: r0 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents64(r1, &(0x7f0000001480)=""/4096, 0x1000) 12:20:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800050000000000419c7269602600000000e73be0e0d34551043d7b2c369d94ef57b4d19be18516558d83c870543d671cef03f1b4e2e95f8b7a4f5ba63b000000d3aaf5bb578155d4fc0ceb9d2d6c2e106635ea26a66773722b3f000000000000"], 0x3c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 2026.532844] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2026.540131] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f0f9d46d6d4 12:20:28 executing program 4: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@umask={'umask'}}]}) 12:20:28 executing program 1: r0 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents64(r1, &(0x7f0000001480)=""/4096, 0x1000) 12:20:28 executing program 4: keyctl$setperm(0x5, 0x0, 0x41200008) 12:20:28 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) pipe2(0x0, 0x4000) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 12:20:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0xee00) tkill(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nr0\x00', 0x0}) 12:20:28 executing program 1: r0 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents64(r1, &(0x7f0000001480)=""/4096, 0x1000) 12:20:28 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r2, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, r3, 0x0) socket(0x0, 0x2, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x0) [ 2027.255972] warn_alloc_show_mem: 1 callbacks suppressed [ 2027.255977] Mem-Info: [ 2027.264270] active_anon:568942 inactive_anon:181594 isolated_anon:0 [ 2027.264270] active_file:33067 inactive_file:50365 isolated_file:0 [ 2027.264270] unevictable:7713 dirty:308 writeback:0 unstable:0 [ 2027.264270] slab_reclaimable:17326 slab_unreclaimable:130041 [ 2027.264270] mapped:66522 shmem:12034 pagetables:20951 bounce:0 [ 2027.264270] free:503686 free_pcp:648 free_cma:0 [ 2027.302803] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:260kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2027.333497] Node 1 active_anon:854260kB inactive_anon:344512kB active_file:132016kB inactive_file:201200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35400kB dirty:1192kB writeback:0kB shmem:10420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2027.365343] Node 0 DMA free:10296kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2027.393709] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2027.400410] Node 0 DMA32 free:20116kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:260kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16512kB pagetables:55444kB bounce:0kB free_pcp:944kB local_pcp:712kB free_cma:0kB [ 2027.432258] lowmem_reserve[]: 0 0 0 0 0 [ 2027.436388] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2027.464081] lowmem_reserve[]: 0 0 0 0 0 [ 2027.469970] Node 1 Normal free:1985784kB min:53612kB low:67012kB high:80412kB active_anon:854260kB inactive_anon:344512kB active_file:132016kB inactive_file:201200kB unevictable:0kB writepending:1192kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15968kB pagetables:28360kB bounce:0kB free_pcp:1380kB local_pcp:692kB free_cma:0kB [ 2027.502064] lowmem_reserve[]: 0 0 0 0 0 [ 2027.506401] Node 0 DMA: 4*4kB (UMEH) 1*8kB (E) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10296kB [ 2027.524487] Node 0 DMA32: 638*4kB (MEH) 433*8kB (MEH) 514*16kB (UMEH) 32*32kB (UMH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 19744kB [ 2027.541130] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2027.553488] Node 1 Normal: 197*4kB (UME) 256*8kB (UME) 686*16kB (UME) 667*32kB (UME) 305*64kB (UME) 72*128kB (UME) 120*256kB (UME) 73*512kB (UME) 22*1024kB (UME) 2*2048kB (UM) 446*4096kB (UM) = 1985428kB [ 2027.574255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.584362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.596258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.606490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.616226] 93456 total pagecache pages [ 2027.621794] 0 pages in swap cache [ 2027.625401] Swap cache stats: add 0, delete 0, find 0/0 [ 2027.632868] Free swap = 0kB [ 2027.636023] Total swap = 0kB [ 2027.640971] 1965979 pages RAM [ 2027.644200] 0 pages HighMem/MovableOnly [ 2027.650379] 339050 pages reserved [ 2027.654024] 0 pages cma reserved 12:20:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x5, 0xfffffffffffffee1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="66b9800000c00f326635000400000f3066b9024d564b0f320f01c40f217566b9b803000066b864d0c5f266ba000000000f3066b9130000000f32baf80c66b806a21e8766efbafc0cb8c50f0173000f01c2b82f000f00d8", 0x57}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) 12:20:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@loopback, @local}, 0x8) 12:20:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r3, 0x23f, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) 12:20:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x0) 12:20:29 executing program 1: setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) lremovexattr(0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x4400, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@access_any='access=any'}, {@cache_loose='cache=loose'}, {@version_L='version=9p2000.L'}, {@dfltuid={'dfltuid'}}, {@loose='loose'}]}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getresgid(&(0x7f0000000740)=0x0, 0x0, &(0x7f00000007c0)) lchown(&(0x7f0000000340)='./file0\x00', 0x0, r2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000200)="01c0edbc561b3ddb06ffab6df123e0f0a7c41957c95a91d304944e2f7bf6307e7f9eaaf0f97eb2c8416cb7f9c755e5ec481052522f0113bc03190c779fbd5c1c4cfade7783ee9960f3b13124b12ac5662fe027c5009cfb2662a0c4090cb71bea1c1e675487a36931da99abd54db6b2aeaf0fc977969ff48c", 0x78}, {&(0x7f0000000600)="65cd1647a658d47586c8d79f1785770654a58a03a1a0b057311c5b777b3f8b93222f4d5dc9e013e7f2d2980e859fdbc376b671a60bd3601d6eeca2bbd6a51ee280c0da21", 0x44}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x8000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x2000000000000011, 0x2, r3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x94, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:kmsg_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4028011}, 0x0) getpid() 12:20:29 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000000000) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x7fffffa7) 12:20:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, 0xfffc, [0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) chroot(&(0x7f0000000000)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000088, 0xfb, 0x0, 0x0, 0x0, 0x701]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:20:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000090030000d0000000d0000000d000000000000000d0000000c0020000c0020000c0020000c0020000c0020000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d900000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000300000000000000fe88000000000000000000000000000100000000000000000000ffffac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000060000000000fe8000000000000000000000000000aafe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f3100006c6f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000f800200100000000000000000000000000000000000000000000000050006d756c7469706f7274000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) 12:20:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000000440)=""/131, 0x83}], 0x4, &(0x7f0000000500)=""/199, 0xc7}, 0x4}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/211, 0xd3}, {&(0x7f0000000800)=""/98, 0x62}], 0x2}, 0x1}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) stat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 12:20:29 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r2, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, r3, 0x0) socket(0x0, 0x2, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x0) [ 2027.940571] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 12:20:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503c80006023e0001a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) creat(0x0, 0x0) [ 2027.976725] audit: type=1800 audit(1587471629.681:5009): pid=14401 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17320 res=0 [ 2027.984157] syz-executor.5 cpuset= [ 2028.002198] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2028.067367] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2028.080013] / mems_allowed=0-1 [ 2028.100393] CPU: 0 PID: 14390 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 2028.108441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2028.117957] Call Trace: [ 2028.120575] dump_stack+0x13e/0x194 [ 2028.124228] warn_alloc.cold+0x96/0x1af [ 2028.128220] ? zone_watermark_ok_safe+0x280/0x280 [ 2028.133121] ? wait_for_completion+0x390/0x390 [ 2028.137783] __alloc_pages_slowpath+0x2114/0x26c0 [ 2028.142700] ? warn_alloc+0xf0/0xf0 [ 2028.146377] ? find_held_lock+0x2d/0x110 [ 2028.150472] ? fs_reclaim_acquire+0x10/0x10 [ 2028.154979] __alloc_pages_nodemask+0x5d3/0x700 [ 2028.159807] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2028.164892] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2028.169772] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2028.174842] alloc_pages_current+0xe7/0x1e0 [ 2028.179287] kvm_mmu_create+0xd1/0x1c0 [ 2028.183202] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2028.187647] ? alloc_pages_current+0xef/0x1e0 [ 2028.192168] kvm_vcpu_init+0x26d/0x360 [ 2028.196080] vmx_create_vcpu+0xf3/0x2900 [ 2028.200187] ? __mutex_unlock_slowpath+0x75/0x780 [ 2028.205043] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2028.210086] ? handle_rdmsr+0x6b0/0x6b0 [ 2028.214106] kvm_vm_ioctl+0x49c/0x1430 [ 2028.218025] ? kvm_vcpu_release+0xa0/0xa0 [ 2028.222459] ? perf_trace_run_bpf_submit+0x113/0x170 [ 2028.227604] ? check_preemption_disabled+0x35/0x240 [ 2028.232917] ? perf_trace_run_bpf_submit+0x113/0x170 [ 2028.238158] ? perf_trace_lock+0x2ef/0x4b0 [ 2028.242421] ? save_trace+0x290/0x290 [ 2028.246236] ? SOFTIRQ_verbose+0x10/0x10 [ 2028.250322] ? kvm_vcpu_release+0xa0/0xa0 [ 2028.254883] do_vfs_ioctl+0x75a/0xfe0 [ 2028.258729] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2028.263519] ? ioctl_preallocate+0x1a0/0x1a0 [ 2028.267974] ? security_file_ioctl+0x76/0xb0 [ 2028.272404] ? security_file_ioctl+0x83/0xb0 [ 2028.276848] SyS_ioctl+0x7f/0xb0 [ 2028.280230] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2028.284223] do_syscall_64+0x1d5/0x640 [ 2028.288147] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2028.293378] RIP: 0033:0x45c829 [ 2028.296592] RSP: 002b:00007f0f9d46cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2028.304353] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2028.313757] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2028.321144] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2028.328973] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2028.337159] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f0f9d46d6d4 [ 2028.431521] audit: type=1804 audit(1587471629.711:5010): pid=14401 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir286183323/syzkaller.BmRGCs/2470/file0" dev="sda1" ino=17320 res=1 12:20:30 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1a3042, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000c328982ca170ad7871aeef62f3e4bf6ebe614aebf6bc8c67facad93a4cce82060854710eecc5693b792b9960e1912fea55df02ca9552037dc5d110c8a2a21642a0b6ac7985787c093a1521d900674b9fc83b05ce4d123c39287ae33b1edaf88af74cee572a128a75654639c8405754108c4b6353376b69f737deda15730027fdb7b83050d92e56a524ca981425ded377fa88db4ba89bf681d7988f04250e836129dfaafe47389feee611e0d5fbb62b8cd96aa3adb670d252b77611b6c956618195fb52e0b2b456cc001e7e540ec53c871938071647ebae93110daf901ba59c71c64cd20679a13e758d0247acd10a8f599b3cad39e8bfe8fde0dc84035c79d16043082d14291eb7954ccfca8249296ee585e934bff9e9198feeb64d7c9824ac031eadfe1d03d7f29f2e104f32ba2cc7008706efd9efed17a00c9d24f8b2c62d21a6274663b9283aa054675082043b106621163b778abf4069fa82e3b34d11c3fad6d013c557733218756619b64dfb7e50173ebb3752e2bcd6b347e35fcc2abd78037724c77523b034a74349cea98884e991465d763a2062c944a0248bf20de7d2eb63080b438d2694b0de95fa1b438b1f7df3ace2830be7892d99abfede08f86454154f473d7caccf2d469add7e44a88e2beb61d4c1ff49cd159e87ff8881c60ffa4a25c133a1dd706a6c5e09c924c8e5f56c8ce72d024a40be2a3a0304fd8d454e891a14c2c4c5e7b0ec16e9d283b788bf78294d2f0c2ec63d45feebb692b143771573c2b4676a3f9c6453501364ce276f3a0ea782c01575d0988e605e16c906f94633e78c379da488fb2a2f870a78691955edd9cd9a5ee06f4338eaf03c31d48fba42dde73737b218e9e5d6980c7f815b20bb0981e3da2de34fa06685cf0186a4894da7fcbb1d35024da7c5f0fb1512580641ba1979a07605b70ceb70bfca24a03dbfe2efb62a9cde667924f33dadaf0ef131551e7fc64e0e9419b4d514ce826b6b4bd6f50d804dcf6661eb56331985afb86887b3a673e3ae085c0edda54260465b3c3b0217a56d97aeb2adde5bf8c097d596ce5d2923b508fa7183184d85f2c59f6ad420ccf131529fff36b92f8966b0f136d08494167c5dc2a3e04034044d831259db0286d92ee5bc9a0cb0f319ca7b7f2cbaad63fb7c4d4bf46ff5afd5947342408849c035a2781845606bee706443a7801ba774357d810cfe87a8586abb72466917f7852faaaf3ac682145f21b6bdc4793bc601c7266965657dfb45109e2f5a3ebfe17482083e32815b924dd0898c93633c94135c29d326455a8b1e1cbc3a9e69fbe25319f5de563911268026ec3adbb549a22f20251fc11ac736b637838021b689c950983cb4274b66b05364e5c127a39db8b2e33394b3c62e162dab1cfcd47fdeab64da1b27f7d60597628fd3a7a4d1765c64e0ea0dbb3aa4bac52ee423a0e1d95b83bdd4939ef48cc7a46c02e67182eddf08561fcafd9dde3fb294de7cff39734d306344c3f89f2124e9c22f38e5e71adb4b53efcc6dbc228e76021315a1415f5c8bd366e9ab55be93bd95ca0000296d8b9301f4cdb21b4a5df833beed5ebb42df6c5ce56998f6d00a60e02a349b949924254c6cefae257d14c5a299cb30862ea33141638abcb579e1c96c7fd83e02c07ff6ea52a1cd93e0715b54c9cfbf7bef7431b8e425fe55cc6403883612287737954033883817412a4d5755b5a77db89d81dae2380e0498b2d3b53893a43c2b386ca37d7b8b558dd136b1da096e0ece9f59d6e8e5803c78b6292c2503223e8f98574cdae0d234e247c461862f116687c12d8601bf5087e02de267753cd555f5ff5921d2cc68ad53caa09526d86e314877fa5f5526852ce9f41158374496e487ec1ac114124c1f077cc7664a098b7420e93180b9ea9d7e1a9a7e873699e9ab6f9e897f41dc605a2e6e0b18af5a6a6ad5493a7cc55393cde8d579e65fe4af242f40d6f6e8b9a70c7837040fad643c8d76961ffe5332298abad5702e901e19f7ea34919fae8faf7f2baa28b75ee0c118c64b81b598626be62dfecee2c097714fdb2364a9ae3af12386fd25cfbffa7c7c406ebcc5ebe3c2fe99558a6f0e127921b97e9f48004b9e748293f8e45467eee2fb0dacefacbcae0db0201e063a679dd14a63b2b600bb0bc69603d545e960a28c3971ec7041b9360c4509c7ea4ec10ac6b029f04eab20816a4e17e41aebf55e8cdebe50f15e87f4b414031e057ae7ff11cf012add93eada4b5a0007bc74341915c33251f4dc3c0923249ede5639f1ad5deb7c4e126ac7a6d723d560ac6c5a39cb85ca224753d57b55e7f612771b95cbed58b451909c8f5131ab27870ec4dbe4e8987c713a3aabb2462d9c20c73fe64923a752e172ed209fe5ad494b7242a5c05a5746c06505983a043dbe68be825fe1eb8651df82aa651586308af602a0adf52c91bb8fc08e18d2e8f4905e06f9f495111565940932db91e77cad1b2d09d942004f5db0e0ab8b0853ed645d64642ca5f0a37b0396424e8941ed227c72d00a2718c1be946b9b25ba6193fb075d7bfb881ac3cfb21ff97ad0773792601c9ff63fc2633203d386ba25191d22cd1cad90328ac44a62ce6de9dc82854ab5f80ee9f6cdb029d712c214275202842d2dc09773a8ae1a7e2cd4af70ec6ae80065854a58341e180350d1ba4f8705053dd5e941af2fcbdeecf413bc82ce1f888b395089c714655214a7b721bc3a25bc80bf525ac06bd5b23e864c87cabac3f4036bd0ca5b6a0dd9d29b5d8b9fba7f2bd0820c2b512ff8e0c6014166f2697348d71819eccab635c1cea4d53d32fe5baa7055e650d2246c68b1787a35244b1ff9a00c6a36810ca73463e83b5b654cbdecdcab4b22d12d34e1fc5e705b0a33fe161bbc4526456c3c24309cf9ad35b640bc043c0a4159023b266743a58d48405fb9cac758f877c88880959e03bb7969cdc1026f2f1917f841027a041f242ea8ad150621849c732d97703a0f8a1cf78da2a451f060abbb403163dfd7cecedabd56d8c9168d6323ad1a9b8bbfe50abcb5f532d24f278f11085e0f66af7052259d9fe91f29cb48ce8dee1bcf4b7c077196d23e8e06214f9b96158f2fa891916d163b2d79f5f46c70839d26a61bc256aaef58a24b3d5c7e2847e65ceb3d620463c28fdfd83cdc46f7d6fa1b271ad6bdbbda5f86c0f2ade5d9226b86516a34266fde25e3b83431ca396aa1dea3ec242d7c52e740c0dff2b45a295e89a75108db401296095f1e510b7c2874f54602f6aa6047f266d49d1b2611ccbd1ca6da020e33664036bea5eaff6eebbdcbe6f65b77753dd1bdbfc3bbed098c2d1c8ac77995a3f517e8ee0b4871196755f2e3268f27781c0c0a796a4e2a8d16a99b077c5e135ee4af1f1722fa87c47dfec6ce7bfc882f6eb95e364511167de77dcdbb8439b682f448564f72e059f7803a61e2ed69966b42c06c06cdb9fdd292d851ea3d35598a04e288369cf0171d4cbfeca1f2bcb8e4709b685a3a8c68141f9d1b527bca33422115d75808d088b5b24660e9acbcf8b18c68c8cdb5c17e8c76c2b4e7103bd6598cdb63ebc0107c75f93f747f2e098cf161959aa6a20b8ff1360e1cdf64f073efe74047ebab91aa4e1e6702312405dca895c03e678b6b4aa23b75093af68868e914d390c97eed8ae6dc468d8bc17b18350c8f10b08ca5f5bd24db536f43612b80c2943671c929fa3cfab1c19105c523dee261e1f3943a2d1a9e4e48525053819a5a763228c6bf919496ca3ad937002993c99ea0b45b2163548a00a36609740845c88f2783258e3e89df0668126bbe40b2204fb64ac57e8c5c5f9478b5660112983e1857c78d8a6a2d2b6a03126174592ce62c9b33789748ab584eaf9fc46fc197763a49647fe89eb0152eba29db388687e93847aaa82f6099bd1156c7991d0f1d4f2b52e7f6800a4d1964de84328c4248f05e19f1f1e15f170b0ecea428c09afa089cc2149b9777ff74d335c3fa27461ede3fe29228080fd29505c4ee6e8609406a25a017a468b2417835903054cd4523c3745a51bc2cd2640847cddff6f6a188133272c9e5bd702e27c5b9f75c834cebed52d9086f688ea8d2aad5f750bcde5465593a69e30da163f1786a4112e646aa4313448f5447fee1e14ddc07c5e2e5a26053e6e1b43a0f5df90ad55f594620d14048cb8a5c65ec7d839a4ce647e07c48150d23f2d9e454e3a83838a5560eefa6c3b5865bdcf6298bb54a23d132dcb5f743d4050b8ebf88b711954bb255731e0c2856147e1ac1f7f10530997faa90fe1b9792fc75ad15ee087c318e961ded96b30ef87339b403b37b600f9758b5b07edcdff2b6c8c167e5cc3fd1e6508de2f97d64cbfb6f97e4787e6ba3051d4e27ff8c1e12ef873fc55a8933b598ea63b0bec218f5ef71aa673895a832f255d923f428042d1da06b2b26d1ff26601a6139a1cca37dc7fbe882e7031dadd814d574afa63d44a41ee7d05775e81a968188fa0bfcbb688a5e6ec0b5362430e0f6ac5c88811f4c4d3b18bc3013b572175bf54fc9c1e9eddfa75ccd6f1bec0aba61054e0345ad94b70feb88e6af12ba0b1610411d76fad79e28b7fcc23645892bcde083298ef40b07d7af5d908301e872ea90c3704bc17eae3d0bb8525156b149a7d3b9c7a90dccbd1ef22207c0802db3be0de91add2100a46734eec70e58327c5414a949f54886add93bc79cf193b7d624e31fdda947e304173d1b94cbf9da055fe7d68d51cb136bbfde597cefb9b4088406ecd814bad93bcac0c54c43c17b60401ac4497bd36fbd888eba8487c0fa1ae9d5e3700e8de3b14f2dae731630181752fcc151adda7122efbb827cef9fe0c273ab4d74237a72089f452dee35b4caacbe8a98cda1018056f9e57700205cc447845e5f9e01b7b07ca2085de0f4870fc3d387c8b4d109b6cdd59dfe55824e5ed3a01f757d2b0a668b14777930b859e7b15bd3ef9583cf344081365860b4afafca3eb3262d6ca2399b5c1eae3f72d0def038cd7665d09fa75f62771b154c5b2b11a2edf48a07f1d8561a83dea08a5acd14fb9f893230ea45f27e4b88d2704691d8d263044f0daacee289cf6452513cb78908019817217d4cee93d6c5d3a561458c5ad206e3b694df928580d64a821f5233b315040870a6b64ee9dfaecec97550117d2db177587346a8728b4235e5975753d09954bf500043ab72b7127bb3e81768a534f63eb578d5e1bad43401e793a5fe119baad9933669f947649fb622eb01000000485ae597f1f101601d0da8534e1920a75388a22ed450e8ce2f2fe01be82a250d2994574fd0b2b558850173302673a914ce1cba6faf8472e4cfee18d2ef693a56dfeb51eb5a93af41ec8f84e48fa5779a3ba84db8ef74b3194fc1f5e4e839e68896384fbe7e4fbb2fe7360156168c16f1f139379ba9e841a2698db24466e4243cbc002c07896daa7b0ebe17f9725eb8568c934419b2a692e760e75439afa11acc71e4d89f2b8afa4b29172957aaed601399aff08265fe85a88797cbafd311409c2fe22a704b1e82d8a7bd27fbf2a4262777a7c0df2120e3392734c99c6d7c37ef76fd0633055be98d4bde758dee76507cc1470ac8e394c0135024ba9b9b2a04fe73bf"], 0xfa8) [ 2028.636941] Mem-Info: [ 2028.645101] active_anon:569110 inactive_anon:181594 isolated_anon:0 [ 2028.645101] active_file:32818 inactive_file:50371 isolated_file:0 [ 2028.645101] unevictable:7713 dirty:318 writeback:0 unstable:0 [ 2028.645101] slab_reclaimable:17291 slab_unreclaimable:130030 [ 2028.645101] mapped:66731 shmem:12034 pagetables:21028 bounce:0 [ 2028.645101] free:503757 free_pcp:427 free_cma:0 [ 2028.757674] audit: type=1804 audit(1587471630.461:5011): pid=14430 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir286183323/syzkaller.BmRGCs/2470/file0" dev="sda1" ino=17320 res=1 [ 2028.812668] audit: type=1804 audit(1587471630.471:5012): pid=14432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir286183323/syzkaller.BmRGCs/2470/file0" dev="sda1" ino=17320 res=1 [ 2028.845793] Node 0 active_anon:1421508kB inactive_anon:381864kB active_file:252kB inactive_file:260kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:40kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2028.888029] Node 1 active_anon:854732kB inactive_anon:344512kB active_file:131020kB inactive_file:201224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36236kB dirty:1232kB writeback:0kB shmem:10420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2028.917957] Node 0 DMA free:10296kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2028.945823] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2028.951647] Node 0 DMA32 free:19324kB min:36272kB low:45340kB high:54408kB active_anon:1421508kB inactive_anon:380556kB active_file:252kB inactive_file:260kB unevictable:26756kB writepending:40kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16512kB pagetables:55444kB bounce:0kB free_pcp:752kB local_pcp:692kB free_cma:0kB [ 2028.992030] lowmem_reserve[]: 0 0 0 0 0 [ 2028.996184] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2029.022588] lowmem_reserve[]: 0 0 0 0 0 [ 2029.027161] Node 1 Normal free:1986868kB min:53612kB low:67012kB high:80412kB active_anon:854648kB inactive_anon:344512kB active_file:131020kB inactive_file:201224kB unevictable:0kB writepending:1232kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15936kB pagetables:28396kB bounce:0kB free_pcp:1400kB local_pcp:704kB free_cma:0kB [ 2029.075493] lowmem_reserve[]: 0 0 0 0 0 [ 2029.083501] Node 0 DMA: 4*4kB (UMEH) 1*8kB (E) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10296kB [ 2029.101790] Node 0 DMA32: 709*4kB (UMEH) 446*8kB (UMEH) 485*16kB (UMEH) 34*32kB (UMH) 0*64kB 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 19732kB [ 2029.124578] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2029.139263] Node 1 Normal: 114*4kB (UE) 27*8kB (UME) 727*16kB (UME) 715*32kB (UME) 315*64kB (UME) 70*128kB (UME) 121*256kB (UME) 73*512kB (UME) 22*1024kB (UME) 2*2048kB (UM) 446*4096kB (UM) = 1986096kB [ 2029.174741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2029.188877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2029.197496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2029.207025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2029.216349] 93478 total pagecache pages [ 2029.220703] 0 pages in swap cache 12:20:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x5, 0xfffffffffffffee1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="66b9800000c00f326635000400000f3066b9024d564b0f320f01c40f217566b9b803000066b864d0c5f266ba000000000f3066b9130000000f32baf80c66b806a21e8766efbafc0cb8c50f0173000f01c2b82f000f00d8", 0x57}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) 12:20:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x1800004, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @initdev}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xcd, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4}}, 0x5c) 12:20:30 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000080)=[{r0}, {r3, 0xa600}], 0x2, 0x0, 0x0, 0x0) 12:20:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@gettaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:20:30 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) 12:20:30 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000000000) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x7fffffa7) [ 2029.224312] Swap cache stats: add 0, delete 0, find 0/0 [ 2029.231322] Free swap = 0kB [ 2029.234509] Total swap = 0kB [ 2029.237700] 1965979 pages RAM [ 2029.243254] 0 pages HighMem/MovableOnly [ 2029.247517] 339050 pages reserved [ 2029.254732] 0 pages cma reserved 12:20:31 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x3db, 0x0, 0x0) 12:20:31 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d5d, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b196d079c4d4758fa35d17c668a4b63e069efb29797573b8530e31ec24925095a163b9d4e76be266e31a80212240baa44e080addde36e5fdc6c42a7b3f912f6906a6e2313091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694d1f8898b3e6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f088481fffffff00004000632f77", 0x0, 0x100, 0x6000000000000000}, 0x28) 12:20:31 executing program 1: io_submit(0x0, 0x200000000000020d, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="22fe45e673ab33675f36aa8aa40065e3b0a7feef39701643b2015b8bc8e36d5fbcdd2386260e6e5c7fad16532bc81f8c9b6e7bcdca30c2bc7362539054380b129389bf95d83038b0cd09d3c6aa37bb021d656bac3d4ebead9ce5072a18d2", 0x0, 0xc, 0x0, 0x2}]) [ 2029.421412] audit: type=1800 audit(1587471631.131:5013): pid=14452 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16109 res=0 12:20:31 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800000030003b05000000000000000000000000540001003c0001000b00010073696d706c650000280002801800020001"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2029.574845] audit: type=1804 audit(1587471631.161:5014): pid=14452 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir286183323/syzkaller.BmRGCs/2471/file0" dev="sda1" ino=16109 res=1 [ 2029.600228] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 12:20:31 executing program 1: syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[], [{@euid_lt={'euid<'}}]}) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) [ 2029.643337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2029.702241] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2029.758990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14465 comm=syz-executor.4 12:20:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40282}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xa0}, @IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) [ 2029.892940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14465 comm=syz-executor.4 [ 2029.921041] audit: type=1804 audit(1587471631.631:5015): pid=14474 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir308717137/syzkaller.n4CTkz/680/file0" dev="sda1" ino=17347 res=1 [ 2029.954080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14465 comm=syz-executor.4 12:20:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20400, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080)=0x3, 0xffffffffffffff81) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x3, 0x486, r10, 0x0, &(0x7f0000000040)={0x9a0001, 0x3, [], @value=0x4}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r11, 0xc08c5335, &(0x7f0000000100)={0x1, 0x7f, 0x0, 'queue1\x00', 0xffffff1f}) [ 2030.050298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14465 comm=syz-executor.4 12:20:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x6, @any, 0x1, 0x1}, 0xe) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x54e}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r4, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2faf7052f81bff3f7f9439860753d36cfe7cdd8ba2903e51a505347889fa985b2ff24e52ef660fe15efcd2297045d6e2f3d6cbbca7074a0150bd2eff2696d5a2e5bceadf017d25d5a3efdfe42c63f6ac0826e8d106aa67d37cc3b445b978a755801bf9c6b04dad210eda35a1ecb1383b4bc04596b32307b3e5ac4a75323f04efa62f8fe161ddc324bb6544e27d907d4e6a395f4852015d4dbd1756c27655830a1878f94c8d5c2ecead469ef75b82b8479b70a047628e32f497791422b8064ef0e19af3eb5c23e3973c76409f46bf8d10559e7590eaceb218a235969544969dbded8472dcb0c913914e781dd9"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x14002, 0x0) r6 = dup(0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x15, 0x23, 0x11, 0x9, 0x4, 0x0, 0x1, 0x151, 0xffffffffffffffff}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) [ 2030.202381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14465 comm=syz-executor.4 12:20:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f32f00fb30f0f309a0900000065002ed8ddc74424008f6dc4bd8787442402c43a727fc7442406000000000f35f30f090f013a360f06c4c18d72d683b9070200000f32ed", 0x49}], 0x1, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0x0, 0x1000}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r7, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000140)={0x5, 0x5, 0x0, 0x5c9bf1e0, 0x80}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x27, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x4000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12:20:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_subtree(r3, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0xf8, 0xf8, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0x0, 0x0, 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1]}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 12:20:32 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000000000) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x7fffffa7) [ 2030.286639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14465 comm=syz-executor.4 [ 2030.371565] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2030.409038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14465 comm=syz-executor.4 [ 2030.453200] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 2030.462186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2030.482186] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2030.499789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14465 comm=syz-executor.4 [ 2030.517079] audit: type=1800 audit(1587471632.221:5016): pid=14504 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16186 res=0 [ 2030.540156] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2030.546263] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2030.587924] CPU: 1 PID: 14496 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 2030.595675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14493 comm=syz-executor.4 [ 2030.595859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2030.617566] Call Trace: [ 2030.620171] dump_stack+0x13e/0x194 [ 2030.623808] warn_alloc.cold+0x96/0x1af [ 2030.627782] ? zone_watermark_ok_safe+0x280/0x280 [ 2030.632637] ? wait_for_completion+0x390/0x390 [ 2030.637228] __alloc_pages_slowpath+0x2114/0x26c0 [ 2030.642109] ? warn_alloc+0xf0/0xf0 [ 2030.645744] ? find_held_lock+0x2d/0x110 [ 2030.649905] ? fs_reclaim_acquire+0x10/0x10 [ 2030.654260] __alloc_pages_nodemask+0x5d3/0x700 [ 2030.659910] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2030.665107] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2030.669947] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2030.674995] alloc_pages_current+0xe7/0x1e0 [ 2030.679335] kvm_mmu_create+0xd1/0x1c0 [ 2030.683245] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2030.687783] ? alloc_pages_current+0xef/0x1e0 [ 2030.692499] kvm_vcpu_init+0x26d/0x360 [ 2030.696412] vmx_create_vcpu+0xf3/0x2900 [ 2030.700573] ? __mutex_unlock_slowpath+0x75/0x780 [ 2030.705419] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2030.710456] ? handle_rdmsr+0x6b0/0x6b0 [ 2030.714566] kvm_vm_ioctl+0x49c/0x1430 [ 2030.718483] ? __lock_acquire+0x5f7/0x4620 [ 2030.722814] ? kvm_vcpu_release+0xa0/0xa0 [ 2030.727238] ? check_preemption_disabled+0x35/0x240 [ 2030.732311] ? perf_trace_lock+0x109/0x4b0 [ 2030.736997] ? check_preemption_disabled+0x35/0x240 [ 2030.742025] ? perf_trace_lock+0x109/0x4b0 [ 2030.746272] ? save_trace+0x290/0x290 [ 2030.750075] ? SOFTIRQ_verbose+0x10/0x10 [ 2030.754145] ? kvm_vcpu_release+0xa0/0xa0 [ 2030.758297] do_vfs_ioctl+0x75a/0xfe0 [ 2030.762106] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2030.766865] ? ioctl_preallocate+0x1a0/0x1a0 [ 2030.771305] ? security_file_ioctl+0x76/0xb0 [ 2030.775717] ? security_file_ioctl+0x83/0xb0 [ 2030.780145] SyS_ioctl+0x7f/0xb0 [ 2030.783525] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2030.787500] do_syscall_64+0x1d5/0x640 [ 2030.791401] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2030.797213] RIP: 0033:0x45c829 [ 2030.800401] RSP: 002b:00007f615e1d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2030.808236] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2030.815519] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2030.822796] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2030.830107] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 12:20:32 executing program 3: prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/54) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000001cc0)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth1_to_bond\x00', 0x4000}) [ 2030.837658] R13: 0000000000000390 R14: 00000000004c605c R15: 00007f615e1d66d4 [ 2030.856853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14465 comm=syz-executor.4 [ 2030.896860] audit: type=1804 audit(1587471632.261:5017): pid=14504 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir286183323/syzkaller.BmRGCs/2472/file0" dev="sda1" ino=16186 res=1 [ 2031.000145] device veth1_to_bond left promiscuous mode 12:20:32 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x567480, 0x40) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x200040020a) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r5) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x0, 0xffffffff}, 0x10}, 0x78) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r7, 0x0, 0x8000, 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000740)={0x4}) kcmp(r9, 0x0, 0x2, r7, r6) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7f2626e991039ac75e7a2053aecd7befa7b8f25afa0b208d6448a27546638533cfe5e489af81690d90890a0c4dd9f64f9f493954c993040865c48c8a1bc91f6597d6b15e820d3ad974c85653edd00022aafc5d4aaa3be22d6a59e2b078d1eda69c077d7cdef60000c941de38d2c2f2602ed7eb8b9c3b0cb26278001e0ae733afda64f2a53fb8753d5f07a33068d95e9bdca24b5e393f008ad4f052a2085085744186e34d5150b5b519a2e9d7663219eef5e5cf64f66493fba5e579a07e0000000000", @ANYRESHEX, @ANYBLOB=',ro000000000000000010000,usr_id=\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB="2c67726f757036a7aeaab788765f69643d09e8af42572ee4da90cc24e3b7c33e23333d48010400000000000043c859cf76e963547629164f261bd21f032ce060447949ad052371ad54cff9293f997b262e5ab3af48aaa20dceb0267f4dbecbc30740f99fba6200ef0d858bbe0d8d89799b8c8bb6f931c7204ecfb72223e584921270bfdb079355a193a86e814fe95d28f2adfbc481ba57ad9a3feba948c712dae4d9f1f72e530fc6a06db8f8899f59c6230acab0d99b42d1199eff2c124039e96b272e61a86a06f415efd08cafa9e2f06c7320b04ae8c72790881c2a42fef3d2ed979a947cdc7fe3b5e474c6", @ANYRESDEC=r11, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB="2ca3d526c246b71b73723d7b6261630000000072616e736d7574753d2f6465762f6b766d002c00ae3ad4bce20971cc0567d813ecfd861a6120e4dab49e2f919dd8aa9aef019450a3b04f977ee65f01000000f061bf91999b942e04792d53cc636019e31925132a5ccab623b1cb6347369444bc39a00634820a70faa90697774515ddbfe72bcd34488b253bee7101ca59d6fb269f597cf6eeb09a10c4c41e85f2ba912153b80dac76c5b5eef800000000"]) setgid(r11) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x2000, 0x100, &(0x7f0000000600)) stat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000140)='./bus\x00', r10, r12, 0x800) r13 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffff8000, 0x1d}, 0x102, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r13) 12:20:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x220c04, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000700)={@none, 0xffffffff}) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000180)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, r0, 0x304df000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) read$FUSE(r6, &(0x7f0000000740), 0x1000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000100)={0x6, 0x3ff, 0x40}) 12:20:33 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000000000) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x7fffffa7) 12:20:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x6e, 0xe80, 0xfffffe6f, &(0x7f0000000100)="480e003f0000007e5bc5795eca003f0800ffffffba0000f0ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640b161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000180)={0x0, 0x7, 0x8, @dev={[], 0x2d}, 'geneve0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_PORT_SELF={0x4}]}, 0x24}}, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @remote, @local}, &(0x7f00000009c0)=0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PORT_SELF={0x4}]}, 0x24}}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, 0x0) accept4$packet(r5, &(0x7f0000000a00)={0x11, 0x0, 0x0}, &(0x7f0000000a40)=0x14, 0x80800) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80200020}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)=ANY=[@ANYBLOB="78010000", @ANYBLOB="000326bd7000fbdbdf25040000003400018014000200697036746e6c3000000000000000000008000300000000001400020076657468305f746f5f62726964676500740001801400020076657468305f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e000000000000140002007665746830000000000000000000000008000300000000000800030002000000080001000e00269e27a5175272f5d45194fd94500fd5bb3614920b412bebaa2943fa7cb16572af59bfe32d3875bbe663d2879081c2c5868866", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d00000040000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYPTR64, @ANYRES32, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003003cab114634000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB], 0x1b}, 0x1, 0x0, 0x0, 0x8804}, 0x0) [ 2031.393262] binder: 14525:14538 ioctl 5609 20000100 returned -22 12:20:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xffff, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e26, 0x1, @local, 0x32f9b8a0}, 0x1c) listen(r0, 0x0) msgget(0x1, 0x102) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x80000000, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) acct(&(0x7f0000000100)='./file0\x00') [ 2031.485326] audit: type=1800 audit(1587471633.191:5018): pid=14542 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17367 res=0 12:20:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x6e, 0xe80, 0xfffffe6f, &(0x7f0000000100)="480e003f0000007e5bc5795eca003f0800ffffffba0000f0ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640b161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000180)={0x0, 0x7, 0x8, @dev={[], 0x2d}, 'geneve0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_PORT_SELF={0x4}]}, 0x24}}, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @remote, @local}, &(0x7f00000009c0)=0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PORT_SELF={0x4}]}, 0x24}}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, 0x0) accept4$packet(r5, &(0x7f0000000a00)={0x11, 0x0, 0x0}, &(0x7f0000000a40)=0x14, 0x80800) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80200020}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)=ANY=[@ANYBLOB="78010000", @ANYBLOB="000326bd7000fbdbdf25040000003400018014000200697036746e6c3000000000000000000008000300000000001400020076657468305f746f5f62726964676500740001801400020076657468305f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e000000000000140002007665746830000000000000000000000008000300000000000800030002000000080001000e00269e27a5175272f5d45194fd94500fd5bb3614920b412bebaa2943fa7cb16572af59bfe32d3875bbe663d2879081c2c5868866", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d00000040000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYPTR64, @ANYRES32, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003003cab114634000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB], 0x1b}, 0x1, 0x0, 0x0, 0x8804}, 0x0) 12:20:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[]}}, 0x4001000) 12:20:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x6e, 0xe80, 0xfffffe6f, &(0x7f0000000100)="480e003f0000007e5bc5795eca003f0800ffffffba0000f0ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640b161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000180)={0x0, 0x7, 0x8, @dev={[], 0x2d}, 'geneve0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_PORT_SELF={0x4}]}, 0x24}}, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @remote, @local}, &(0x7f00000009c0)=0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PORT_SELF={0x4}]}, 0x24}}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, 0x0) accept4$packet(r5, &(0x7f0000000a00)={0x11, 0x0, 0x0}, &(0x7f0000000a40)=0x14, 0x80800) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80200020}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)=ANY=[@ANYBLOB="78010000", @ANYBLOB="000326bd7000fbdbdf25040000003400018014000200697036746e6c3000000000000000000008000300000000001400020076657468305f746f5f62726964676500740001801400020076657468305f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e000000000000140002007665746830000000000000000000000008000300000000000800030002000000080001000e00269e27a5175272f5d45194fd94500fd5bb3614920b412bebaa2943fa7cb16572af59bfe32d3875bbe663d2879081c2c5868866", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d00000040000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYPTR64, @ANYRES32, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003003cab114634000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB], 0x1b}, 0x1, 0x0, 0x0, 0x8804}, 0x0) [ 2032.198978] Mem-Info: [ 2032.203897] active_anon:580037 inactive_anon:181594 isolated_anon:0 [ 2032.203897] active_file:33076 inactive_file:50446 isolated_file:0 [ 2032.203897] unevictable:7713 dirty:147 writeback:0 unstable:0 [ 2032.203897] slab_reclaimable:17286 slab_unreclaimable:130623 [ 2032.203897] mapped:66737 shmem:12036 pagetables:20976 bounce:0 [ 2032.203897] free:492090 free_pcp:665 free_cma:0 [ 2032.294669] Node 0 active_anon:1421140kB inactive_anon:381864kB active_file:252kB inactive_file:260kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:56kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2032.412026] Node 1 active_anon:906108kB inactive_anon:344512kB active_file:131052kB inactive_file:201524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36360kB dirty:532kB writeback:0kB shmem:10428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2032.486943] Node 0 DMA free:10296kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2032.543684] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2032.554712] Node 0 DMA32 free:29528kB min:36272kB low:45340kB high:54408kB active_anon:1421140kB inactive_anon:380556kB active_file:252kB inactive_file:260kB unevictable:26756kB writepending:56kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16512kB pagetables:55444kB bounce:0kB free_pcp:1280kB local_pcp:736kB free_cma:0kB [ 2032.641977] lowmem_reserve[]: 0 0 0 0 0 [ 2032.661110] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2032.715818] lowmem_reserve[]: 0 0 0 0 0 [ 2032.724777] Node 1 Normal free:1912956kB min:53612kB low:67012kB high:80412kB active_anon:916108kB inactive_anon:344512kB active_file:131052kB inactive_file:202524kB unevictable:0kB writepending:532kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:15904kB pagetables:28312kB bounce:0kB free_pcp:1312kB local_pcp:736kB free_cma:0kB [ 2032.792611] lowmem_reserve[]: 0 0 0 0 0 [ 2032.802509] Node 0 DMA: 4*4kB (UMEH) 1*8kB (E) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10296kB [ 2032.861002] Node 0 DMA32: 1698*4kB (UMEH) 659*8kB (UMEH) 539*16kB (UMEH) 94*32kB (UMH) 2*64kB (M) 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 28304kB [ 2032.895922] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2032.919525] Node 1 Normal: 271*4kB (UME) 141*8kB (UME) 30*16kB (UME) 552*32kB (UME) 253*64kB (UME) 25*128kB (UME) 110*256kB (UME) 69*512kB (UE) 19*1024kB (UE) 1*2048kB (U) 436*4096kB (UM) = 1910596kB [ 2032.957220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2032.977493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2032.995972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2033.022474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2033.051095] 93535 total pagecache pages [ 2033.060263] 0 pages in swap cache [ 2033.075400] Swap cache stats: add 0, delete 0, find 0/0 [ 2033.093821] Free swap = 0kB [ 2033.105660] Total swap = 0kB [ 2033.115603] 1965979 pages RAM [ 2033.133657] 0 pages HighMem/MovableOnly [ 2033.145004] 339050 pages reserved [ 2033.159377] 0 pages cma reserved 12:20:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84d0040000c9c8dc1964325fa96fa4ffff120000002bec0ba4c81036c93a40c8a4580001c03b0004000000040000000000410101c0ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup3(r9, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$ION_IOC_HEAP_QUERY(r11, 0xc0184908, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000080)}) 12:20:34 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="7b5f340100007da7bac8bd0798eed8a23c21761d4752236b1a05adbb"], 0x1c) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0x801, 0x4) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffffffffffe55) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="0000008a5017a55c49b792bb4840d720f14a0900ffffffff0000000009000100"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="500000270d00000000000000000000fba95800000c6e639233a5d320af29adeab97f5f208b7e267b6f2394a194b877ddd7ba1541b002abacee9aa632ae25dd644fa648d99a230f4fa8fb1f5a6349007ddc9e21f234f6882ac73018fdf1e62326bdb4ed9c8cc44f0cda77f4ec33fc2666a7327924e6fb6aa3586382e3cb46679d9755cce4a521bad6f29f3dc1382cda9bba64002a0bbee1cb4cf3159a0ebf5040480ed2dba5fd41f308af84db7b9fee9f42ba507da0ab90", @ANYRES32=r7, @ANYBLOB="0000000000000000f1ff00000a0001006261736963000000200002001c000280100002800c00010000000200000000000800010001040000"], 0x50}}, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001440)='/dev/autofs\x00', 0x40000, 0x0) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f00000002c0)={0x0, 0x1, 0x6, @random="05bc35079991"}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$nbd(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 12:20:34 executing program 2: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x66, 0x6, 0x4, 0x100000, 0x3, {0x77359400}, {0x5, 0x2, 0x2, 0x0, 0x3, 0x0, "2d9c0ccc"}, 0x7, 0x4, @fd=0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x800, 0x2, r3}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x1cd080, 0x0) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000180)=0x9) r5 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f00000001c0)) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept(r6, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80) nanosleep(&(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x410382, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000700)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000d40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000e40)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000e80)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000f00)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000fc0)={@initdev, 0x0}, &(0x7f0000001000)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000005100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000050c0)={&(0x7f0000004580)={0xb38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffc0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r12}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfe1c}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x32}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2000000}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7e}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9c83}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xb7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4032}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x54, 0x4, [{0x2, 0x7, 0x5}, {0x7, 0x5, 0x9, 0x6}, {0xff, 0x4, 0x7f, 0x66}, {0x2, 0x42, 0xc7, 0x1}, {0x100, 0x7, 0x1, 0x1ff}, {0x6, 0x20, 0x2, 0x4}, {0x9, 0x20, 0x8, 0x3f}, {0x4, 0x4, 0xe7, 0x1ff}, {0x6, 0x81, 0x0, 0x4}, {0xffc1, 0x1, 0x1f, 0xca0}]}}}]}}]}, 0xb38}, 0x1, 0x0, 0x0, 0x4040080}, 0x14) 12:20:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/16) 12:20:35 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000004c0)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) sendto(r0, &(0x7f0000000040)="b7d558137852ac7340ac8edd815ebb81a57f88570c3ddea9d79bd82485471a411141d7109d0c323cc0dc3c8b0b443146bcb81d5b5f97636dfe3d3338b786270737399b6ed942df41cec871b167fa9ec48d70331c672a0b4c98e797706a0957c494c4d77fd53974f7e624d4bc776012e559a34a5f33f3d16ab69f44a0bea53d07aecf55abb2c7244c7ddddf45bb5ab91694d2bb70845c1e5bd3bc2c89f12fa10a68745ddd2cef667b63cf7dcb3e941198", 0xb0, 0x40081, 0x0, 0x0) [ 2033.282754] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 12:20:35 executing program 3: ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) socket(0x10, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000380)=0xc) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x102000, &(0x7f00000003c0)={[{@index_off='index=off'}, {@index_on='index=on'}], [{@uid_gt={'uid>'}}, {@seclabel='seclabel'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r2}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '&securityvmnet1'}}, {@fsname={'fsname', 0x3d, '//'}}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2590a8c4b1b274cd560a38132780b4d31a6e6883923d5c85ed65e83c44443b07008e151b1fb442a659c534ba73c6c686a2437302e116685fec7f4c00"/71, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) [ 2033.372658] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2033.390348] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 12:20:35 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="7b5f340100007da7bac8bd0798eed8a23c21761d4752236b1a05adbb"], 0x1c) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0x801, 0x4) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffffffffffe55) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="0000008a5017a55c49b792bb4840d720f14a0900ffffffff0000000009000100"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="500000270d00000000000000000000fba95800000c6e639233a5d320af29adeab97f5f208b7e267b6f2394a194b877ddd7ba1541b002abacee9aa632ae25dd644fa648d99a230f4fa8fb1f5a6349007ddc9e21f234f6882ac73018fdf1e62326bdb4ed9c8cc44f0cda77f4ec33fc2666a7327924e6fb6aa3586382e3cb46679d9755cce4a521bad6f29f3dc1382cda9bba64002a0bbee1cb4cf3159a0ebf5040480ed2dba5fd41f308af84db7b9fee9f42ba507da0ab90", @ANYRES32=r7, @ANYBLOB="0000000000000000f1ff00000a0001006261736963000000200002001c000280100002800c00010000000200000000000800010001040000"], 0x50}}, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001440)='/dev/autofs\x00', 0x40000, 0x0) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f00000002c0)={0x0, 0x1, 0x6, @random="05bc35079991"}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$nbd(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) [ 2033.443664] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2033.464923] CPU: 0 PID: 14564 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 2033.472856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2033.482224] Call Trace: [ 2033.484829] dump_stack+0x13e/0x194 [ 2033.488475] warn_alloc.cold+0x96/0x1af [ 2033.492466] ? zone_watermark_ok_safe+0x280/0x280 [ 2033.497334] ? wait_for_completion+0x390/0x390 [ 2033.501935] __alloc_pages_slowpath+0x2114/0x26c0 [ 2033.506812] ? warn_alloc+0xf0/0xf0 [ 2033.510467] ? find_held_lock+0x2d/0x110 [ 2033.514556] ? fs_reclaim_acquire+0x10/0x10 [ 2033.519699] __alloc_pages_nodemask+0x5d3/0x700 [ 2033.523915] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2033.526666] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2033.526686] ? __alloc_pages_nodemask+0x5e0/0x700 [ 2033.526698] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 2033.526723] alloc_pages_current+0xe7/0x1e0 [ 2033.526817] kvm_mmu_create+0xd1/0x1c0 [ 2033.526855] kvm_arch_vcpu_init+0x28b/0x8b0 [ 2033.562996] ? alloc_pages_current+0xef/0x1e0 [ 2033.567513] kvm_vcpu_init+0x26d/0x360 [ 2033.571857] vmx_create_vcpu+0xf3/0x2900 [ 2033.575942] ? __mutex_unlock_slowpath+0x75/0x780 [ 2033.580829] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2033.585881] ? handle_rdmsr+0x6b0/0x6b0 [ 2033.589891] kvm_vm_ioctl+0x49c/0x1430 [ 2033.593807] ? __lock_acquire+0x5f7/0x4620 [ 2033.598083] ? kvm_vcpu_release+0xa0/0xa0 [ 2033.602251] ? check_preemption_disabled+0x35/0x240 [ 2033.607307] ? perf_trace_lock+0x109/0x4b0 [ 2033.611567] ? check_preemption_disabled+0x35/0x240 [ 2033.616605] ? perf_trace_lock+0x109/0x4b0 [ 2033.620876] ? save_trace+0x290/0x290 [ 2033.624693] ? SOFTIRQ_verbose+0x10/0x10 [ 2033.628798] ? kvm_vcpu_release+0xa0/0xa0 [ 2033.632964] do_vfs_ioctl+0x75a/0xfe0 [ 2033.636785] ? selinux_file_mprotect+0x5c0/0x5c0 [ 2033.641559] ? ioctl_preallocate+0x1a0/0x1a0 [ 2033.645994] ? security_file_ioctl+0x76/0xb0 [ 2033.653251] ? security_file_ioctl+0x83/0xb0 [ 2033.657886] SyS_ioctl+0x7f/0xb0 [ 2033.661544] ? do_vfs_ioctl+0xfe0/0xfe0 12:20:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="4261e525be810cf38a9cc03eacb21cc07ea09241862132ed7098fac6606ecb137f16954ccd2936548e10f5ecad2de4dc75b7f755b950ce85df23", 0x3a, 0x48, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80800) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "e0be41e156d50210", "c5aeaa2c46ca871f9ccae99f3f9ca960", "0db96ae3", "126f154a5e0d4a1e"}, 0x28) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) 12:20:35 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="7b5f340100007da7bac8bd0798eed8a23c21761d4752236b1a05adbb"], 0x1c) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0x801, 0x4) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffffffffffe55) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="0000008a5017a55c49b792bb4840d720f14a0900ffffffff0000000009000100"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="500000270d00000000000000000000fba95800000c6e639233a5d320af29adeab97f5f208b7e267b6f2394a194b877ddd7ba1541b002abacee9aa632ae25dd644fa648d99a230f4fa8fb1f5a6349007ddc9e21f234f6882ac73018fdf1e62326bdb4ed9c8cc44f0cda77f4ec33fc2666a7327924e6fb6aa3586382e3cb46679d9755cce4a521bad6f29f3dc1382cda9bba64002a0bbee1cb4cf3159a0ebf5040480ed2dba5fd41f308af84db7b9fee9f42ba507da0ab90", @ANYRES32=r7, @ANYBLOB="0000000000000000f1ff00000a0001006261736963000000200002001c000280100002800c00010000000200000000000800010001040000"], 0x50}}, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001440)='/dev/autofs\x00', 0x40000, 0x0) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f00000002c0)={0x0, 0x1, 0x6, @random="05bc35079991"}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$nbd(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 12:20:35 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000004c0)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) sendto(r0, &(0x7f0000000040)="b7d558137852ac7340ac8edd815ebb81a57f88570c3ddea9d79bd82485471a411141d7109d0c323cc0dc3c8b0b443146bcb81d5b5f97636dfe3d3338b786270737399b6ed942df41cec871b167fa9ec48d70331c672a0b4c98e797706a0957c494c4d77fd53974f7e624d4bc776012e559a34a5f33f3d16ab69f44a0bea53d07aecf55abb2c7244c7ddddf45bb5ab91694d2bb70845c1e5bd3bc2c89f12fa10a68745ddd2cef667b63cf7dcb3e941198", 0xb0, 0x40081, 0x0, 0x0) [ 2033.665539] do_syscall_64+0x1d5/0x640 [ 2033.669478] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2033.674677] RIP: 0033:0x45c829 [ 2033.676394] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2033.677870] RSP: 002b:00007fd87d523c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2033.677884] RAX: ffffffffffffffda RBX: 00000000004e6ec0 RCX: 000000000045c829 [ 2033.677891] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2033.677898] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2033.677905] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2033.677912] R13: 0000000000000390 R14: 00000000004c605c R15: 00007fd87d5246d4 12:20:35 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'wg0\x00'}, @IFLA_LINKMODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r4, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000100)={0x47e, 0x4, 0x1, r2}) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x40000000000fa) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB='.0\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='f2fs\x00', 0x0, 0x0) [ 2033.810709] Mem-Info: [ 2033.814231] active_anon:586199 inactive_anon:181594 isolated_anon:0 [ 2033.814231] active_file:32836 inactive_file:50703 isolated_file:0 [ 2033.814231] unevictable:7713 dirty:159 writeback:0 unstable:0 [ 2033.814231] slab_reclaimable:17286 slab_unreclaimable:130753 [ 2033.814231] mapped:66807 shmem:12036 pagetables:21159 bounce:0 [ 2033.814231] free:485353 free_pcp:701 free_cma:0 12:20:35 executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02003601", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x70, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) [ 2033.865190] XFS (md0): SB validate failed with error -5. [ 2033.982582] Node 0 active_anon:1421140kB inactive_anon:381864kB active_file:252kB inactive_file:232kB unevictable:30852kB isolated(anon):0kB isolated(file):0kB mapped:230688kB dirty:56kB writeback:0kB shmem:37716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 960512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2034.025583] Node 1 active_anon:923356kB inactive_anon:344512kB active_file:131092kB inactive_file:202580kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36540kB dirty:780kB writeback:0kB shmem:10428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2034.072951] Node 0 DMA free:10296kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:1308kB active_file:0kB inactive_file:0kB unevictable:4096kB writepending:0kB present:15992kB managed:15908kB mlocked:4096kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2034.142589] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2034.147917] Node 0 DMA32 free:24676kB min:36272kB low:45340kB high:54408kB active_anon:1421140kB inactive_anon:380556kB active_file:252kB inactive_file:260kB unevictable:26756kB writepending:60kB present:3129332kB managed:2621268kB mlocked:26624kB kernel_stack:16512kB pagetables:55444kB bounce:0kB free_pcp:1236kB local_pcp:736kB free_cma:0kB [ 2034.187822] lowmem_reserve[]: 0 0 0 0 0 [ 2034.193008] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2034.232419] lowmem_reserve[]: 0 0 0 0 0 [ 2034.236593] Node 1 Normal free:1907392kB min:53612kB low:67012kB high:80412kB active_anon:923284kB inactive_anon:344512kB active_file:131104kB inactive_file:202612kB unevictable:0kB writepending:816kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:16000kB pagetables:28740kB bounce:0kB free_pcp:1368kB local_pcp:740kB free_cma:0kB [ 2034.274968] lowmem_reserve[]: 0 0 0 0 0 [ 2034.279205] Node 0 DMA: 4*4kB (UMEH) 1*8kB (E) 2*16kB (EH) 4*32kB (UMEH) 4*64kB (UMEH) 3*128kB (MEH) 3*256kB (UEH) 3*512kB (UME) 3*1024kB (UEH) 2*2048kB (UE) 0*4096kB = 10296kB [ 2034.306764] Node 0 DMA32: 677*4kB (UMEH) 561*8kB (UMEH) 539*16kB (UMEH) 94*32kB (UMH) 2*64kB (M) 1*128kB (H) 5*256kB (H) 2*512kB (H) 2*1024kB (H) 0*2048kB 0*4096kB = 23436kB [ 2034.329927] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2034.345456] Node 1 Normal: 277*4kB (UME) 33*8kB (UME) 76*16kB (UME) 620*32kB (UME) 250*64kB (UE) 24*128kB (UME) 109*256kB (UE) 69*512kB (UE) 19*1024kB (UE) 1*2048kB (U) 435*4096kB (UM) = 1907996kB [ 2034.375833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2034.386830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2034.401136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2034.413551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2034.425321] 93574 total pagecache pages [ 2034.432549] 0 pages in swap cache [ 2034.436299] Swap cache stats: add 0, delete 0, find 0/0 [ 2034.444871] Free swap = 0kB 12:20:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84d0040000c9c8dc1964325fa96fa4ffff120000002bec0ba4c81036c93a40c8a4580001c03b0004000000040000000000410101c0ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup3(r9, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$ION_IOC_HEAP_QUERY(r11, 0xc0184908, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000080)}) 12:20:36 executing program 2: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x66, 0x6, 0x4, 0x100000, 0x3, {0x77359400}, {0x5, 0x2, 0x2, 0x0, 0x3, 0x0, "2d9c0ccc"}, 0x7, 0x4, @fd=0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x800, 0x2, r3}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x1cd080, 0x0) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000180)=0x9) r5 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f00000001c0)) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept(r6, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80) nanosleep(&(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x410382, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000700)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000d40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000e40)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000e80)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000f00)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000fc0)={@initdev, 0x0}, &(0x7f0000001000)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000005100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000050c0)={&(0x7f0000004580)={0xb38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffc0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r12}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfe1c}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x32}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2000000}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7e}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9c83}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xb7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4032}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x54, 0x4, [{0x2, 0x7, 0x5}, {0x7, 0x5, 0x9, 0x6}, {0xff, 0x4, 0x7f, 0x66}, {0x2, 0x42, 0xc7, 0x1}, {0x100, 0x7, 0x1, 0x1ff}, {0x6, 0x20, 0x2, 0x4}, {0x9, 0x20, 0x8, 0x3f}, {0x4, 0x4, 0xe7, 0x1ff}, {0x6, 0x81, 0x0, 0x4}, {0xffc1, 0x1, 0x1f, 0xca0}]}}}]}}]}, 0xb38}, 0x1, 0x0, 0x0, 0x4040080}, 0x14) 12:20:36 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0xb, 0xa, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x7ff, {}, {r5}, 0x50059038, 0x401}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r3, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCX25SCALLUSERDATA(r7, 0x89e5, &(0x7f00000000c0)={0x5d, "41b36354352a338c156c694fbb1df631e6c7e500c80cc2c9cef0fd53703d6c914e7f2b0a24885f77ce78d6f83827fc91d31933f005e897ad4fa7ef3a84e952c194e26948aabf2f531ba9407bd8707e032588b6db0e1691ccdd070742433331fb3d5665deb9e45242add8a0d71fab6060b093dbd231b6d2f2d194abdb4552bc86"}) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="276d03a8236c6f6f703000"], &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='iso9660\x00', 0x0, 0x0) 12:20:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="4261e525be810cf38a9cc03eacb21cc07ea09241862132ed7098fac6606ecb137f16954ccd2936548e10f5ecad2de4dc75b7f755b950ce85df23", 0x3a, 0x48, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80800) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "e0be41e156d50210", "c5aeaa2c46ca871f9ccae99f3f9ca960", "0db96ae3", "126f154a5e0d4a1e"}, 0x28) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) 12:20:36 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="7b5f340100007da7bac8bd0798eed8a23c21761d4752236b1a05adbb"], 0x1c) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0x801, 0x4) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffffffffffe55) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="0000008a5017a55c49b792bb4840d720f14a0900ffffffff0000000009000100"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="500000270d00000000000000000000fba95800000c6e639233a5d320af29adeab97f5f208b7e267b6f2394a194b877ddd7ba1541b002abacee9aa632ae25dd644fa648d99a230f4fa8fb1f5a6349007ddc9e21f234f6882ac73018fdf1e62326bdb4ed9c8cc44f0cda77f4ec33fc2666a7327924e6fb6aa3586382e3cb46679d9755cce4a521bad6f29f3dc1382cda9bba64002a0bbee1cb4cf3159a0ebf5040480ed2dba5fd41f308af84db7b9fee9f42ba507da0ab90", @ANYRES32=r7, @ANYBLOB="0000000000000000f1ff00000a0001006261736963000000200002001c000280100002800c00010000000200000000000800010001040000"], 0x50}}, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001440)='/dev/autofs\x00', 0x40000, 0x0) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f00000002c0)={0x0, 0x1, 0x6, @random="05bc35079991"}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$nbd(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 12:20:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) [ 2034.451933] Total swap = 0kB [ 2034.454987] 1965979 pages RAM [ 2034.462315] 0 pages HighMem/MovableOnly [ 2034.466418] 339050 pages reserved [ 2034.474401] 0 pages cma reserved [ 2034.559190] [ 2034.563342] =============================