0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffff6282}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x45}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0x2}) 07:47:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1583.068060] [] ipv6_setsockopt+0xc8/0x130 [ 1583.068068] [] tcp_setsockopt+0x88/0xe0 [ 1583.068077] [] sock_common_setsockopt+0x9a/0xe0 [ 1583.068085] [] SyS_setsockopt+0x166/0x260 [ 1583.068093] [] ? SyS_recv+0x40/0x40 07:47:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1583.068102] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1583.068110] [] ? SyS_clock_settime+0x220/0x220 07:47:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee00, 0xee01]) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000180)=[r2, r3]) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x2}}, 0x0) socket$key(0xf, 0x3, 0x2) 07:47:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xa56d9a2c37e40655, 0x7fe, &(0x7f0000000140)={0x2, 0x1000004e26, @local}, 0xfe21) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0xffffffffffffffa8) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) r2 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ftruncate(r2, 0x4000b) sendfile(r0, r2, 0x0, 0xd868) [ 1583.068118] [] ? do_syscall_64+0x48/0x550 [ 1583.068125] [] ? SyS_recv+0x40/0x40 [ 1583.068132] [] do_syscall_64+0x19f/0x550 [ 1583.068141] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1583.068145] Mem-Info: [ 1583.068164] active_anon:219549 inactive_anon:455013 isolated_anon:0 [ 1583.068164] active_file:4909 inactive_file:21470 isolated_file:0 [ 1583.068164] unevictable:0 dirty:139 writeback:0 unstable:0 [ 1583.068164] slab_reclaimable:7001 slab_unreclaimable:69233 [ 1583.068164] mapped:73213 shmem:463370 pagetables:23130 bounce:0 [ 1583.068164] free:773521 free_pcp:519 free_cma:0 [ 1583.068190] Node 0 active_anon:878196kB inactive_anon:1820052kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292852kB dirty:556kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:47:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1583.068215] DMA32 free:3014432kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:440kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1583.068253] Normal free:79652kB min:5580kB low:9168kB high:12756kB active_anon:878124kB inactive_anon:1820052kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:556kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28004kB slab_unreclaimable:276492kB kernel_stack:30944kB pagetables:92420kB bounce:0kB free_pcp:648kB local_pcp:380kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1583.068314] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 60*32kB (UM) 55*64kB (UM) 34*128kB (UM) 42*256kB (UM) 38*512kB (UM) 29*1024kB (UM) 19*2048kB (UM) 709*4096kB (UME) = 3014432kB Normal: 741*4kB (UME) 416*8kB (UME) 201*16kB (UME) 203*32kB (UME) 117*64kB (UME) 146*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 79556kB 489748 total pagecache pages [ 1583.068367] 0 pages in swap cache [ 1583.068372] Swap cache stats: add 0, delete 0, find 0/0 [ 1583.068374] Free swap = 0kB [ 1583.068376] Total swap = 0kB [ 1583.068379] 1965979 pages RAM [ 1583.068381] 0 pages HighMem/MovableOnly [ 1583.068383] 313617 pages reserved [ 1583.141688] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1583.141700] CPU: 1 PID: 15610 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1583.141719] ffff8801a544f888 ffffffff81b42e79 1ffff10034a89f13 ffff880199b94740 07:47:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0xfffffffffffffed5) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x3) sendfile(r0, r1, 0x0, 0x802000000020011) truncate(&(0x7f0000000000)='./file0\x00', 0x9) ftruncate(r1, 0x3f) 07:47:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) ioctl$TIOCNXCL(r2, 0x540d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) 07:47:03 executing program 2: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x80008) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) creat(&(0x7f0000000000)='./file0\x00', 0x9) r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x70, 0x7ff, 0x8001, 0x10000, 0x6, 0x0, 0x7fff, 0x1000, 0x8, 0x7, 0x2, 0x9, 0x1f, 0x7, 0x7, 0x2, 0x40, 0x0, 0x100, 0xfffffffffffffff9, 0x2, 0x8, 0x4, 0x6, 0x803, 0x5, 0x5, 0xc3ae, 0x7, 0xfffffffffffffff7, 0x10001, 0x1, 0x436f, 0xfffffffffffffff9, 0x4c, 0x0, 0x4, 0x0, 0x9, 0x4, @perf_config_ext={0x1, 0x23d}, 0x2b004, 0x4, 0x1, 0x3, 0x3ff, 0x4, 0xfffffffffffff800}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x8007ffe, 0x0) [ 1583.141736] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801a544f9d0 [ 1583.141750] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1583.141753] Call Trace: [ 1583.141768] [] dump_stack+0xc1/0x128 [ 1583.141778] [] warn_alloc.cold.31+0x7f/0x9c [ 1583.141788] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1583.141798] [] ? depot_save_stack+0x11c/0x470 [ 1583.141812] [] ? save_stack_trace+0x16/0x20 [ 1583.141823] [] ? xt_alloc_table_info+0x70/0x100 [ 1583.141832] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1583.141840] [] ? nf_setsockopt+0x6d/0xc0 [ 1583.141849] [] ? check_preemption_disabled+0x3b/0x200 [ 1583.141857] [] __vmalloc_node_range+0x35e/0x600 [ 1583.141866] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1583.141873] [] vmalloc+0x5b/0x70 [ 1583.141881] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1583.141889] [] xt_alloc_entry_offsets+0x41/0x60 [ 1583.141898] [] translate_table+0x215/0x1690 [ 1583.141906] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1583.141915] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1583.141923] [] ? __check_object_size+0x248/0x38e [ 1583.141932] [] do_ip6t_set_ctl+0x2ce/0x470 ** 17 printk messages dropped ** [ 1583.142093] Node 0 active_anon:878296kB inactive_anon:1820052kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292852kB dirty:556kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1583.142113] DMA32 free:3014432kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:440kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1583.142149] Normal free:79396kB min:5580kB low:9168kB high:12756kB active_anon:878224kB inactive_anon:1820052kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:556kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28004kB slab_unreclaimable:276720kB kernel_stack:30976kB pagetables:92420kB bounce:0kB free_pcp:872kB local_pcp:508kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1583.142209] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 60*32kB (UM) 55*64kB (UM) 34*128kB (UM) 42*256kB (UM) 38*512kB (UM) 29*1024kB (UM) 19*2048kB (UM) 709*4096kB (UME) = 3014432kB 07:47:04 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:47:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0xfffffffffffffe9f) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) 07:47:04 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x465) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @rand_addr="afcb62aeb1366cbc63f57486fa982f59", 0x5}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={@local, 0x26, r1}) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) 07:47:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x9, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x3c) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)="86", 0x0}, 0x18) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file2\x00') open(&(0x7f0000000140)='./file2\x00', 0x401, 0xc0) keyctl$set_reqkey_keyring(0xe, 0x3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r2, &(0x7f0000000680)) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x17e868bc}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r3, &(0x7f0000000700), 0x31f, 0x10400003) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') fadvise64(r0, 0x0, 0x10000, 0x5) Normal: 741*4kB (UME) 416*8kB (UME) 201*16kB (UME) 199*32kB (UME) 117*64kB (UME) 146*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 79428kB 489748 total pagecache pages [ 1583.142258] 0 pages in swap cache [ 1583.142264] Swap cache stats: add 0, delete 0, find 0/0 [ 1583.142266] Free swap = 0kB [ 1583.142270] Total swap = 0kB [ 1583.142274] 1965979 pages RAM [ 1583.142277] 0 pages HighMem/MovableOnly [ 1583.142281] 313617 pages reserved [ 1583.761364] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) 07:47:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[], 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x3) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000000c0)=0x101) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) [ 1583.761377] CPU: 0 PID: 15637 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1583.761396] ffff88012dd9f888 ffffffff81b42e79 1ffff10025bb3f13 ffff8801c2842f80 [ 1583.761408] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88012dd9f9d0 07:47:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='vlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ** 38 printk messages dropped ** [ 1583.761772] Node 0 active_anon:878412kB inactive_anon:1820040kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292952kB dirty:540kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:47:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = syz_open_dev$mice(&(0x7f0000000600)='/dev/input/mice\x00', 0x0, 0x220000) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000640)={0x2, 0x8, 0xfff, 0x1ff}, 0x10) r2 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r2, 0x4000b) sendfile(r0, r2, 0x0, 0x802000000020011) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) [ 1583.761795] DMA32 free:3014432kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:440kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB 07:47:05 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) lowmem_reserve[]: 0 3505 3505 [ 1583.761824] Normal free:79688kB min:5580kB low:9168kB high:12756kB active_anon:878340kB inactive_anon:1820040kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:540kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28004kB slab_unreclaimable:276404kB kernel_stack:30976kB pagetables:92352kB bounce:0kB free_pcp:816kB local_pcp:240kB free_cma:0kB 07:47:05 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) lowmem_reserve[]: 0 0 0 [ 1583.761883] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 60*32kB (UM) 55*64kB (UM) 34*128kB (UM) 42*256kB (UM) 38*512kB (UM) 29*1024kB (UM) 19*2048kB (UM) 709*4096kB (UME) = 3014432kB 07:47:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x20080, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000001400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)={0x164, r2, 0x908, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4b54}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffbff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb11}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3c58a01e}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5e25}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbc}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa14}]}, 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x4) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000240)={0x8, 0x1000, "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"}) r4 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r4, 0x4000b) sendfile(r0, r4, 0x0, 0x802000000020011) ** 52 printk messages dropped ** [ 1583.802573] DMA32 free:3014432kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:440kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB 07:47:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x8000}, 0xfede) r2 = dup2(r1, r0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x25e4, 0x3, 0xf, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x2}, [@generic="9a783777aa1f90d9c9bece89c6cfbbf7b697b0c3d9eb3a6b46c168ff3e49001761cdf40b6a3af9333fc973471883919a4f37966a2042cf5ed74487510157950074", @typed={0x14, 0x17, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @nested={0x11c, 0x77, [@typed={0x14, 0x54, @ipv6=@loopback}, @generic="04e28cadc6707e3df795b0675678ffba39c7b902ed9099c4c32889005ef5eed13f93cd842086b61b32ea711a2fdc7842471bfb47de099d8149651e0d4bf7fc1fc666c54891f373185a51d90fe8d476d0981c40e76bf6558d24036409cde0f67289e63e27335fd03a4e900cd2534ffd83c367cc14cb9b484bc1a6993cd6be61dcbf8c3fefea06cf3bd75f3a677100b9cd3febc1b815bec59e9b651efea0e860d334a4771d1959a8a9054b464f82e701900a4889b5371d02e47684c943ddcb097843d6dce5554191c01dafb2776c38fcaf3c0728be3da09ec66433f801dc980a960cf2efbd22fa5f846cd7183380536f522815719e2e93cdf3af", @typed={0x8, 0x6, @u32=0x7fffffff}]}, @nested={0x26c, 0x6a, [@generic="4043439ef87cc0d16174e8ac1ae767eb667813ad4b5a58116d6a13684b2b958cc69ba1b48c5ca47838b7345807f6cac6aa8dbbd4ee05c91382d1f1954e1f122c514e40b591e435608d609bc9b7d3713c8a14eba8b6e28786cab925c720f4a275032effd74bdf41f7b52a630947aa9b2d9b5f1db1fc4164de46936828be006c0a1af9bef16bc9410a1a933e02c7feedf03a4ad1d100630815a1de0f76e77ade1ca7bb2dd41b31aac019a23a5a969b54be87a7897aa7e9f47b44b5199c65c779cd0b4869", @typed={0x20, 0x2e, @str='GPL$userbdevmime_typeem1\x00'}, @generic="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", @generic="e22a5de2e15e4d48ff1e771d9816414544f3d0a954a237819aadd55670cf010854a3845577a4951be5f0ba48703c7dc0b3aef96544fe0072e34c3af1e59742c6ce90c2791ec6e0b3e0605b63a280e45f6348571a9e6a2061ced8f4f6c1965776669188e5994f51cba6686251b63be38b944ca74bc732e6acb19e0d1ce16e83b30b14ad00c1"]}, @generic="f85c3cd7e1d0240a2a5050508e21d78ff07b3f5d9d6ed68e66353227098774a1ef099c07f20ecf6be02fd181c7d9024fa1b19a4c3d43a3fd78a5668a7b5b1aaa90446f6dd3388ed85bec37901b5f718d009ca5407b4f415ba61fb92874206da85d914c807681ef8c851f6d5ea2ce50d995aed15d92ccee0a84a6c5d87e9b071a84e9a29904b30e798ef8cc3bf25846c7261cc5334b6d3173f0050c73e4af38d2d558347cdfeb77eafcd0e8396f140a5c94b3fc02b2539dc194f28d6b", @nested={0x2134, 0x3c, [@typed={0x8, 0x2b, @u32=0x3ff}, @generic="9b7e88ae269c6947d77b17000746de814521b71df0ffb436de585c30ad47deb2c63c1a17c094f60e31ec73aa01e4defb75441299eb29ddd48129d8f5619e384f691b39e1f1806849db7e1155536fe2053024e42565d13ad66f644887f810a5a8fce00ebe9ccb124cbe51dd1c7b4f6ad7758ee649047ef3a550eb8b80ef129246820acdbb4168f01b7fbb5f06c2975f8aad11ff5517f4e8951e45b09bd7c886", @typed={0x4, 0x25}, @typed={0x8, 0x18, @str='\x00'}, @typed={0x8, 0x74, @fd=r2}, @generic="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", @typed={0x8, 0x72, @pid=r3}, @generic="e08a135821beb7d9befdc7848ec6accab86732a544880544f4cafb2b7be0ed1a548d9ca994918903254850739c1bec7b7348d1c5abd992e2d8bb219b8affeafb455b710430dc566534667950a9da6691d34d4b9cc70ba1187f5e8c7df5b959e48a46aa20a1f6afd18d900327", @generic="4742d25e40c5b047689761a3838e5d009bab0a5a80d7ecf652d2c6c9c3bce03452619ff709ba2ae5bb37dc6fcc1478bf0b87da463fd4c73b722a8abb96bfc9ff409c469041e607441eab6e3fc7b69f48127d54d3f704cf43faaec6460f50a3c6576914f974ff5fda9162a1c89ad7da892bb85817d3b3bc6a01d481e7c37e91a4c8d10a28f386b6fb730bf4fe57515877ceff9e343282cc7b060f83f01c5c739deedac96a6a5e7b6c025e8ec43d2e378d3a3636d7142089f0cc44fe824d431dc8d958e61b1a553e3e2a445b1c6f0dd9b27f8ce1677272a9ab472eb13adcf44e09cddb9951eafe71a8c01ac96a00cf5107e9a24968f1cf6a51372504e0c3baa6f83a016ec422a699c00d01dedfb057bf4611b2da6046fd950074136c82609b156c3ef3382d8941e74cdb601dc169f781a92c78f167ce6f2a05a0f33d574d2261facff4328859af72779d054176ee4f57e91cce51340adca89994e3157d5fff710b73a11fc59bcab18c285b11556e9082f0df7f9e160530086dbc354d99ccff3e5129a169dd43799f722a213a16202f33c7c2a95d800c33f1bfc843b2abf6e46cff4fe43d0b4e55df7641742dece6c629eb4104b23df7cc553b5660f7c38a6e08bfc22ffc8cee7ee190a8e15113bd943c02b14e25fdc35c0a86994f14b7f536fba8389834cac904f82d4dcbfdd3464b9cbbea57eef272a8b64a67bee24df9c77c1cbf51d4eeac7ad5ae4602202f5ca4a7c14dc79e1759b3309de65651517bcc443ab95a849f0b208f77d92f34070d608611b199643c5d65984c8142d96e6a435d127c7ac38d2ed9114285ff80ba4d067c4685169e52294f5f43052e0869d919d79e2cee2c91f9ba231031f686990bbd000db67dfc9f9c87c1045eee24d4114ec4d5517f77a7d02f16c3a599a51aae44bf49d804e7a8b10bb4119cb5dcd0d6e92e7464093a9f6713780f6a36827a61952d7e7da3b7340f1e99d92408bb3d3c8a8d815555fd273d57a7e79df828919a65f734781a47d03faae8e2642ac815924e3805d3bb76188379587d918e4e6c094dadcaa7d7cd674c957fff3cd0bc192fbae88a95b3c25950ee14b8a9f5821f7b3054b753f528e80e366aa1f344846d73796d811933e3b96c97f25ae24172c15f547ec3c69bc2f611b5cbd6a68a6a11fb5c6954ec4bea4f3bce0e58674bacda3dbb4b47b4c6e2b45d992b496789e04375f4ffb647f3dbc0f9c3106d45e30eb9c0985fe951074f738f8eba98239d79e73421293e00efab85e184d49c647caf8dcc92f8f14d43e64517fa35b6b6e2f1f23c0f3f8f3d0a8c405823825216de2bcb1f2dd34b42b53e457c0fad0cf380b3e27ad3a1a0209c6953ffc1aac134365e29cdbf7a6c00f36c025745c5631cea92f591d8b620d6e1f78a49de1c13049f41e945c516fbaf313b824c753920c044394450754dfcaee5e21cbd2b0cc0736abca3df59a62a8e47f1ba26a6296b19a1b80d8e84ef17e74f821667f0c6138244584102b07b1ed03f30a615771d8ba9f6f967f75afcb75cfb658bfa0ae218a2a35db15c981754abdb3e5cf7f11975164998a6a1bad80a9889b48e2f3248714c88b93ce81db54c7ee50b34742960f6c39735898504d21943d5a65b931e0694c858a58647ba32dad7652b08eb79d056df3eea19d12aa5756b10d1151f293cbab6369d3ef9b955c4a6dc5db690b76788811f4704e5f7ccff396f4738ff9f20de027a1abf9f7ae0581e1c3c06dbc0c609af590a6f789194cbeb779a3c326e086afcc205403a51228f24bd89a995fef0b9c9e16f17d2743a7a05e9d0a296c485a45743bf9bda7df3cba0661af23a560430c92ea7f92d6ddafb808c6f2e11cd8dc6634233537285b967312e20c1c050d22b3d4b5aeb903bb54fd94658b4206df4af19f86202b5a424a48e2962b22179091fe85ebc8d6b4522ad086e348f4a0caac26b996914d6f6712b00c172c3c599d33bb6d1f62db5559fcf80619f78cb67834238355894de03c898b506cbb8105ef5ac1e326aa1e3b10e1e26c2b467d7fad238a18b1928d51c715a3b4dc52eaf4a72a444967a1232f86f9db8819d5779a024ac6b8fd8089c44e01d0789e2d6c7ba38447c7b614ee1c8b8e047c9a21d8ab05d2a855ee6d7027082e20fd2bdb2376825be4dedb4425079e0609ab1fee1cc18500797f4ac8f45a6bf7c30432e4cb244d178240b25396e7c1e14670ab919b4e4183967275874b9a7dadbefed8fc673d731aab1f637c42b29a68f4829b96aa0dd64d6ca7e349fb0a737658015c9a42a5a8eb4f3533db37803a1d28a714520dd2d3a7d89a5019ce61270b1f5f9285b357378c46323a6f799c60d587b82d7d9b48bac56800f13f9de31746f0eb108b4efe9f22d38329d4feedbbb24931b91c5c3f27797507ce3c639fb06bafa641eac58f06fe9823a32bae2ae270ae3f0dcf561f7bcbf2dfed2622fe745ee82c3b51280d997e843a1195d0c6e5e23f2ade475f5cd4e009d2202a90913a3904673d28d965b073c696f78b801a8e6eef3e0e8dcdb7423dbf5ea2cadfba63e863cf8688e9934a1d226dff9918612a6f9eb787b2eecd223d3f23ecac4b34ed43c30a31095da7aedc7927297d0064e73c5528929c1357c422d6cb63671154eb9cb4dd2d24f6891972db83a960714ea223c4e50b75f68affee5f8b2ee17316cce4238a4638077e15e04ac319e2f09c00ef13e64273a29c33adb069677197d532e3f869b43982a86b6eaa1dafaa33493804db567652922e3980c259b3552f41380494ef6cdb33fcc1260f60d094f0c5ba80e292ff369b903b3da82eb4f08b153d927cb55b4a18e35327390242c88b8ceb7c54f213b8179031cd01e9c35f761d5071429be66f4d4eb7a6c3307c3e65a1832c952fadaa9876993a8c882984ed57302213cb80f97274e1868716ffc5ea66b43f608da4fe12fbee10c61ffe795d6662fad82ce4f42e824179f4f548dac8d6c2f1c05d2c09b4537a5732679499a4189308298103c612a5a3b8f1b21f887ebf6ae537c4bb49e67b9982e2264cadcadd36752807d9c69a4392823f01dec5c944f80354cf2bd18648f1bc52b04a658d6e39bfddecd2b9b125a6eebd23d5ba34323e377683f06e3758e5d8068d57aab4b6bf800637f0b9083b1988c5f624fad5696e50abb9416aae1794a9b05f8a9f0627d0d9e07528a29dd31c717fe29e3e9cfbfac55aaa32f682d3b8bb283a31d0aba2c3dc57658d62b6a6c305402bbeb24d31cf99a30bb8329e74b83cbe916cefce160d22c2e71a7339af75216e3fa3d7afcfd7ee61219ae708ee30d466644d22c46ec59c6babdeccfbbc7a625ae7a5cf404358a225a664344103725b4c252fd96bf31fc7590d86057f64c740ee39f314a422778236280ec17d54d36307947cef42d297ceb4ce5da4dd3088bbf0e1bf650ee53cd53cbfbac893cc70d1b61bbe2a0aa698cb0d95d8797925257ad37c3d4aca64aa9ee87088f60185488daa208af70f1fdee30493a8e6e750cbc15bbffdc8e966da847511adf743f8196903f4d7a811924d81eae1f148d8c407df6cda427b3b1706e4b022f8db3ec170dceae7543603cfefe32f1ee3b59efe3252c8d7e47529e3a79f32cdc81f90e037856f0370edf3853664891fd6fc3f6f9ab79d8f266da58896ffc5c21da60364ed2d5023303eeced624493cc6bb3ca5c0579d6a92cd8afbfdb2a9e8f63f66d3d797c5c1e472bdc90b4ab4e0c05b18308ba459bb853858aff2fa4e706a82e8c18af53c917bed07be4549b4dc72171365eeb6a8a076a6755f702084c69bc70a0cb415ecbef5b0cdb71e004f211a3e95ae53665d70ef676f0cd98692839af8cccf38c67e26815d1636d6cd41ffc369b9bb53e3a3fb9a909a66a0516b7cfed9f6280d3bde7a85dc8962febf28c5ee8483ae68a486ad2baa0fd0995a25106c37791da805a9fb73fcfe974d6d4c192ecb9f0e5a03df0c0919878420756672f7d2b1e84c648e02072992bd973bdd72386c04aaa68fd8b940e564761d5d21dca8a8503d4095b17182e3c8576628764ee64bb791fe66d1fee51cd3ae7a2bcfed6b2fe8783173da41879d87b638c32802bf21a9d2042c9a81ac0845dac3a67a6f64ea4363b3568d7089821ab9821f29bf179d1cdf13a0d837cef6ea043c2c5bcd8ae2a5f773341cec72a3ec61b936db42b26b82d1b3d9c4671beab50242405ab6655f4fccd40729b06d8627a0084f166ae4f1ef194347a91d58cba03daef930c1ebda3e07f1835debca8ebdc4e38c9d50574cacffb3cd4afa71d6cadd30518b237177c14abb84064290cb55785d4a33839704cacb74553d6dd020a248413cf554a88fe3f39635a5e8bb7a0a847250bfa0006547bea5621f8dde96c0ff65de8cf751adac864137cf2634c1fe894e3c0c40f0363590bb37635598359438c6b22aa5db9a37cf9ecd1447414659d1acac1cbd29c51ecc9d5d005888d93bc2302cf00583b830ad4b5b1dd18f8c4199400b3878df27e03d0f2c2f80d664daa3287e7b4a9a77d46bb2e8a30b3bbdc4c02985682288c788664e109eafb9fd9eea13621ed281183e5a68789aa8d9d9b3c14df6211b127d8fda702dc2aee8c635199b57bf80ecccb27a0e80d8250b6089e68663d5a2d9ff402cbd9a24d4923fee2de46852391761586015a08c40ab3e8ee9dd8073a562062514b119f4f6a900d82ffeefcecd7b64d40292f37cbecae6567815833bb8be614a36d73a31407856e1abd5decdbd79f68d54fa84dda56968f9bebf8da47a7cd45b152bc8e5fad0439298e3744c78776953dd966433d65296cde1a612cb59707ba892d27dd91e60c9ca7946121e138fdbae6b302b5f08821b97d2fd0d9e29728863d73c23145db7f4025ef761e7e020306420d3c19eb1639fbb40cc9fcc62965109d3d183e788280e6b3eebf873d451703fb9d92852264c41b3d7ae3c64ddf32beb428602f947b11fb37767c766850556e14231fe9d4c300380b738c417d61d09acc61be7b7a71bf564c513e23060857ef6b360da8697777fa1a764bfaa05a49a320c3ad907a72a6041d02a3837d805b1d3f91cdac9627cd0a1e07e1459b2bf6b7d17493b10d58a6b24057246452693fd693cba3426fccf351ac537722f240926f64122447e4e7b344529104ab116f23d1e1799320a75c626bcefe216f7e47d4135c833d4d103f7f4df0e1d9c6773e8546e3fc8776595996b4d3dca06b31f79d69a53ce50b93e9e421bfdb08a05f0d61e0fa50e0c49491eb67d519b04a1d71656c11f58361636e7f8d882f3f644a8fdcd21a7a0e6cb29cf81df18eb08b59c9a703ddc17d981db008703e3039e41e89624d8369da4d489d3f2b9f382a03f45ade693f06f607f73b00ba7a936b40fb14ef2755fafbef3f264dfb58e4b7c04b9270de445c4ff8940941569b50a83912c1ee3f49b84d481e180de218ec74b544955948c4426df88b229b2ea3c383d95467f72e58c9722601c351452aa6848e81e26d42926d6de08b83cbd63fe2d8aac478562870be1ae84298c091d23a983f0141c1752cf308e28b3759e55bbdeb0e473495143c7bbaf939ce94d6df592585426d5328a4679f9b7deeb7b16221c97c42d16072b94d8abf622a79801da8b550581c531333a6df3061a8db04e61c5e77d1940693457848b0c69cdb4da7e94be50b523a560f3257a052bf29afb262b0a1c457748db6d0777e103f7975901f1a2c7b370fafb1559b2018c7ed651b1546a806076120766b10d11e3126c4b73480316a50357c546e396461b00d01ea186bf50"]}]}, 0x25e4}, 0x1, 0x0, 0x0, 0x10}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x0) ** 82 printk messages dropped ** [ 1584.945537] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1584.945548] [] ? nf_setsockopt+0x6d/0xc0 [ 1584.945561] [] ? check_preemption_disabled+0x3b/0x200 [ 1584.945570] [] __vmalloc_node_range+0x35e/0x600 [ 1584.945580] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1584.945587] [] vmalloc+0x5b/0x70 [ 1584.945595] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1584.945602] [] xt_alloc_entry_offsets+0x41/0x60 [ 1584.945610] [] translate_table+0x215/0x1690 [ 1584.945618] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1584.945626] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1584.945634] [] ? __check_object_size+0x248/0x38e 07:47:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr, 0x3}, 0x451a1e5d3400a60a) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800400000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x39) [ 1584.945642] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1584.945650] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1584.945659] [] ? mutex_unlock+0x9/0x10 [ 1584.945666] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1584.945673] [] nf_setsockopt+0x6d/0xc0 [ 1584.945681] [] ipv6_setsockopt+0xc8/0x130 [ 1584.945689] [] tcp_setsockopt+0x88/0xe0 [ 1584.945696] [] sock_common_setsockopt+0x9a/0xe0 [ 1584.945703] [] SyS_setsockopt+0x166/0x260 [ 1584.945710] [] ? SyS_recv+0x40/0x40 [ 1584.945718] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1584.945725] [] ? SyS_clock_settime+0x220/0x220 [ 1584.945732] [] ? do_syscall_64+0x48/0x550 [ 1584.945739] [] ? SyS_recv+0x40/0x40 [ 1584.945745] [] do_syscall_64+0x19f/0x550 [ 1584.945753] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1584.945756] Mem-Info: [ 1584.945773] active_anon:219576 inactive_anon:455011 isolated_anon:0 [ 1584.945773] active_file:4909 inactive_file:21470 isolated_file:0 [ 1584.945773] unevictable:0 dirty:135 writeback:0 unstable:0 [ 1584.945773] slab_reclaimable:7001 slab_unreclaimable:69223 [ 1584.945773] mapped:73238 shmem:463370 pagetables:23130 bounce:0 [ 1584.945773] free:773530 free_pcp:594 free_cma:0 ** 20 printk messages dropped ** [ 1586.053682] audit: type=1400 audit(1565077610.692:115155): avc: denied { sys_admin } for pid=2104 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1586.101945] audit: type=1400 audit(1565077610.742:115156): avc: denied { dac_override } for pid=15678 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1586.106777] audit: type=1400 audit(1565077610.742:115157): avc: denied { net_raw } for pid=15679 comm="syz-executor.1" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1586.158007] audit: type=1400 audit(1565077610.792:115158): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1586.171800] audit: type=1400 audit(1565077610.812:115160): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1586.173729] audit: type=1400 audit(1565077610.812:115159): avc: denied { net_admin } for pid=15680 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:47:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:07 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0x545634f53d53b5c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x648a80, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) mmap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0, 0x8004401f071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x20000000000001) fchdir(r1) recvmmsg(r3, &(0x7f0000001f4c), 0x209a6b90bb7b17, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) r6 = accept4$unix(r0, 0x0, &(0x7f0000000140), 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000000c0)={0x31, 0x1, 0x952d}) ftruncate(r2, 0x4000b) finit_module(r6, &(0x7f0000000040)='batadv0\x00', 0x2) sendfile(r0, r2, 0x0, 0x802000000020011) 07:47:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) socket$inet(0x2, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x3273, 0x2}, {0x7ff, 0x1000}], r4}, 0x18, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) 07:47:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() r5 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@remote}, 0x20) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x10010000000035) fcntl$setstatus(r3, 0x4, 0x80000000002c00) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r6) r7 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r7, 0x7fffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$9p(r2, &(0x7f0000000140)="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", 0xfd) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r8, 0x3c) [ 1586.200261] audit: type=1400 audit(1565077610.842:115161): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1586.882637] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) ** 40 printk messages dropped ** [ 1586.883056] active_anon:219583 inactive_anon:455029 isolated_anon:0 [ 1586.883056] active_file:4909 inactive_file:21470 isolated_file:0 [ 1586.883056] unevictable:0 dirty:136 writeback:0 unstable:0 [ 1586.883056] slab_reclaimable:7001 slab_unreclaimable:69228 [ 1586.883056] mapped:73233 shmem:463387 pagetables:23152 bounce:0 [ 1586.883056] free:773512 free_pcp:544 free_cma:0 07:47:08 executing program 1: openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/user\x00', 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') fallocate(r0, 0x24, 0x3ff, 0x1000) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe8, r1, 0x100, 0x70bd2d, 0x3f, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xfc}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xad}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x1) fsetxattr(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="747275947465642e73656c696e78762c000000000000ce902d6c155d0dce98366e44d4253d7feaf9dee269582e3e4162aee1909c36af2366194ab3f41601028990144c4ed855d94bf4b5052c0470d5b7e0abfba65a7fabee0f13"], &(0x7f0000000140)='\x00', 0x1, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) accept4$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, &(0x7f00000004c0)=0x10, 0x80800) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) r3 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x80000, 0x5e) ioctl$TCSETX(r3, 0x5433, &(0x7f0000000440)={0x1, 0x23df, [0x5, 0x5b, 0x2, 0x0, 0x6f7], 0x8ae}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r4, 0x4000b) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @rand_addr=0x1, @multicast2}, 0xc) sendfile(r2, r4, 0x0, 0x802000000020011) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000580)=0x10) r5 = dup(r2) ioctl$TIOCLINUX3(r5, 0x541c, &(0x7f0000000080)) [ 1586.883075] Node 0 active_anon:878332kB inactive_anon:1820116kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292932kB dirty:544kB writeback:0kB shmem:1853548kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:47:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000540)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64e53d30303030303033d66500"/42, @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',max_read=0x0000000000000008,subj_user=,\x00']) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000480)='bond0\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) ptrace$setopts(0x4206, r6, 0x3ff, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@remote, @in=@broadcast, 0x4e21, 0x3, 0x4e24, 0x497, 0xa, 0xa0, 0x20, 0x32, r3, r7}, {0x2, 0x8, 0x8, 0x2, 0x10000, 0x3, 0x7f, 0x9}, {0x7, 0x80000001, 0x4, 0x3ff}, 0x7fffffff, 0x6e6bbf, 0x0, 0x1, 0x2, 0x2}, {{@in6=@local, 0x4d3, 0x3c}, 0xa, @in=@rand_addr=0x1, 0x0, 0x3, 0x0, 0x3, 0x9, 0x3ff, 0x100000000}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000580)=[@timestamp, @timestamp, @timestamp], 0x3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607fe110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060005ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x0) 07:47:08 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3cc, 0x1f000000) ** 56 printk messages dropped ** [ 1588.516518] Node 0 active_anon:878316kB inactive_anon:1820188kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292896kB dirty:544kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1588.516536] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 07:47:09 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1588.516562] Normal free:78712kB min:5580kB low:9168kB high:12756kB active_anon:878244kB inactive_anon:1820188kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:544kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28004kB slab_unreclaimable:277200kB kernel_stack:30880kB pagetables:92252kB bounce:0kB free_pcp:1308kB local_pcp:648kB free_cma:0kB 07:47:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0x545634f53d53b5c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x648a80, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) mmap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0, 0x8004401f071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x20000000000001) fchdir(r1) recvmmsg(r3, &(0x7f0000001f4c), 0x209a6b90bb7b17, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) r6 = accept4$unix(r0, 0x0, &(0x7f0000000140), 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000000c0)={0x31, 0x1, 0x952d}) ftruncate(r2, 0x4000b) finit_module(r6, &(0x7f0000000040)='batadv0\x00', 0x2) sendfile(r0, r2, 0x0, 0x802000000020011) ** 52 printk messages dropped ** [ 1588.599913] Mem-Info: 07:47:09 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:47:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, r3}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x0) [ 1588.599931] active_anon:219564 inactive_anon:455031 isolated_anon:0 [ 1588.599931] active_file:4909 inactive_file:21470 isolated_file:0 [ 1588.599931] unevictable:0 dirty:137 writeback:0 unstable:0 [ 1588.599931] slab_reclaimable:6997 slab_unreclaimable:69402 [ 1588.599931] mapped:73224 shmem:463369 pagetables:23088 bounce:0 [ 1588.599931] free:773307 free_pcp:655 free_cma:0 07:47:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x28f) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000080)='^+[\'(\x00', 0xffffffffffffffff}, 0x30) ptrace$setsig(0x4203, r2, 0x6, &(0x7f0000000140)={0x1b, 0x9, 0xa28}) [ 1588.599945] Node 0 active_anon:878256kB inactive_anon:1820124kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292896kB dirty:548kB writeback:0kB shmem:1853476kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1588.599963] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB ** 53 printk messages dropped ** [ 1589.735224] Mem-Info: [ 1589.735244] active_anon:219677 inactive_anon:455029 isolated_anon:0 [ 1589.735244] active_file:4909 inactive_file:21470 isolated_file:0 [ 1589.735244] unevictable:0 dirty:137 writeback:0 unstable:0 [ 1589.735244] slab_reclaimable:6997 slab_unreclaimable:69323 [ 1589.735244] mapped:73263 shmem:463370 pagetables:23209 bounce:0 [ 1589.735244] free:773250 free_pcp:445 free_cma:0 ** 56 printk messages dropped ** [ 1589.869601] Mem-Info: [ 1589.869621] active_anon:219652 inactive_anon:455029 isolated_anon:0 [ 1589.869621] active_file:4909 inactive_file:21470 isolated_file:0 [ 1589.869621] unevictable:0 dirty:137 writeback:0 unstable:0 [ 1589.869621] slab_reclaimable:6997 slab_unreclaimable:69323 [ 1589.869621] mapped:73213 shmem:463370 pagetables:23246 bounce:0 [ 1589.869621] free:773203 free_pcp:534 free_cma:0 [ 1589.869648] Node 0 active_anon:878608kB inactive_anon:1820116kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292852kB dirty:548kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1589.869673] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1589.869701] Normal free:78348kB min:5580kB low:9168kB high:12756kB active_anon:878536kB inactive_anon:1820116kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:548kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27988kB slab_unreclaimable:276884kB kernel_stack:31168kB pagetables:92884kB bounce:0kB free_pcp:708kB local_pcp:120kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1589.869751] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 546*4kB (UME) 437*8kB (UME) 210*16kB (UME) 168*32kB (UME) 119*64kB (UME) 147*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 78224kB 489748 total pagecache pages [ 1589.869800] 0 pages in swap cache [ 1589.869805] Swap cache stats: add 0, delete 0, find 0/0 [ 1589.869808] Free swap = 0kB [ 1589.869810] Total swap = 0kB [ 1589.869813] 1965979 pages RAM [ 1589.869815] 0 pages HighMem/MovableOnly [ 1589.869817] 313617 pages reserved [ 1590.552968] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1590.552979] CPU: 1 PID: 15793 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1590.552998] ffff88019d02f888 ffffffff81b42e79 1ffff10033a05f13 ffff88019a7f2f80 [ 1590.553012] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019d02f9d0 [ 1590.553025] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1590.553028] Call Trace: [ 1590.553046] [] dump_stack+0xc1/0x128 [ 1590.553057] [] warn_alloc.cold.31+0x7f/0x9c [ 1590.553067] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1590.553085] [] ? depot_save_stack+0x11c/0x470 [ 1590.553099] [] ? save_stack_trace+0x16/0x20 [ 1590.553112] [] ? xt_alloc_table_info+0x70/0x100 [ 1590.553125] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1590.553135] [] ? nf_setsockopt+0x6d/0xc0 [ 1590.553145] [] ? check_preemption_disabled+0x3b/0x200 [ 1590.553154] [] __vmalloc_node_range+0x35e/0x600 [ 1590.553163] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1590.553170] [] vmalloc+0x5b/0x70 [ 1590.553178] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1590.553187] [] xt_alloc_entry_offsets+0x41/0x60 [ 1590.553195] [] translate_table+0x215/0x1690 [ 1590.553204] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1590.553213] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1590.553222] [] ? __check_object_size+0x248/0x38e [ 1590.553231] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1590.553240] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1590.553249] [] ? mutex_unlock+0x9/0x10 [ 1590.553258] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1590.553266] [] nf_setsockopt+0x6d/0xc0 [ 1590.553276] [] ipv6_setsockopt+0xc8/0x130 [ 1590.553284] [] tcp_setsockopt+0x88/0xe0 [ 1590.553294] [] sock_common_setsockopt+0x9a/0xe0 [ 1590.553302] [] SyS_setsockopt+0x166/0x260 [ 1590.553309] [] ? SyS_recv+0x40/0x40 [ 1590.553319] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1590.553327] [] ? SyS_clock_settime+0x220/0x220 [ 1590.553335] [] ? do_syscall_64+0x48/0x550 [ 1590.553343] [] ? SyS_recv+0x40/0x40 [ 1590.553350] [] do_syscall_64+0x19f/0x550 [ 1590.553359] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1590.553363] Mem-Info: [ 1590.553383] active_anon:219664 inactive_anon:455030 isolated_anon:0 [ 1590.553383] active_file:4909 inactive_file:21470 isolated_file:0 [ 1590.553383] unevictable:0 dirty:138 writeback:0 unstable:0 [ 1590.553383] slab_reclaimable:6997 slab_unreclaimable:69375 [ 1590.553383] mapped:73256 shmem:463370 pagetables:23218 bounce:0 [ 1590.553383] free:773153 free_pcp:550 free_cma:0 [ 1590.553399] Node 0 active_anon:878656kB inactive_anon:1820120kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:293024kB dirty:552kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1590.553420] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1590.553449] Normal free:78148kB min:5580kB low:9168kB high:12756kB active_anon:878584kB inactive_anon:1820120kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:552kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27988kB slab_unreclaimable:277092kB kernel_stack:31008kB pagetables:92772kB bounce:0kB free_pcp:772kB local_pcp:540kB free_cma:0kB lowmem_reserve[]: 0 0 0 07:47:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:11 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x208204) r2 = open(&(0x7f0000000140)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14}, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000500000704004000000000000000000000f5ff00000000008d698b26ce5752d61e6f94a905ac404c914e9d87d91a5463a58c1230eefdb15c91ddacd3206331c32c1ddcb8a5a4b40d2b62490b32ea01be4d893fbb29ec5066aab09fd53d071cbe5c677bdc35c9656013f4e935e3947b"]) 07:47:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0xfffffd86) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000140)={'system_u:object_r:mouse_device_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x39f41569}, 0x50) [ 1590.553508] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 511*4kB (UME) 439*8kB (UME) 211*16kB (UME) 168*32kB (UME) 119*64kB (UME) 147*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 78116kB 489748 total pagecache pages [ 1590.553561] 0 pages in swap cache [ 1590.553566] Swap cache stats: add 0, delete 0, find 0/0 [ 1590.553568] Free swap = 0kB [ 1590.553570] Total swap = 0kB [ 1590.553572] 1965979 pages RAM [ 1590.553575] 0 pages HighMem/MovableOnly 07:47:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() r8 = getgid() getgroups(0x5, &(0x7f0000000380)=[r4, r5, r6, r7, r8]) 07:47:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:47:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500a7f161f545eba0280000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000dffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) [ 1590.553576] 313617 pages reserved [ 1590.671868] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) 07:47:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1590.671877] CPU: 1 PID: 15798 Comm: syz-executor.4 Not tainted 4.9.141+ #1 07:47:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x48000, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000140)=0x8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) pipe(&(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r2, 0x4000b) fchmod(r0, 0x10) sendfile(r0, r2, 0x0, 0x802000000020011) getdents(r1, &(0x7f0000000240)=""/200, 0xc8) 07:47:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x4, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x2, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4048090) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(r4, &(0x7f0000000000), 0x4000000b, 0x0) tkill(r4, 0x0) [ 1590.671896] ffff88019c3ff888 ffffffff81b42e79 1ffff1003387ff13 ffff8801c91c8000 [ 1590.671910] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019c3ff9d0 [ 1590.671922] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1590.671923] Call Trace: 07:47:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffde2, 0x20000802, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) r1 = dup2(r0, r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000780)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000007c0)={r2, @remote, @remote}, 0xc) socket$inet(0x2, 0xcd4e30918db32966, 0x8000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x114, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="26d2e0aa242413c8afc97d04ed68160c"}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xd0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffffc1}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'vxcan1\x00'}}}}}, 0x30}}, 0x40001) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/221, 0xdd}], 0x1}}], 0x1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0xffffffff00000000, 0x2, 0x0, 0x7, 0x4, [{0x5, 0x4, 0x1000, 0x0, 0x0, 0x1000}, {0x6, 0x0, 0x6, 0x0, 0x0, 0x8}, {0xfffffffffffff3ac, 0x7, 0x40}, {0x1, 0x3bda, 0xa5a, 0x0, 0x0, 0x1002}]}) [ 1590.671938] [] dump_stack+0xc1/0x128 [ 1590.671950] [] warn_alloc.cold.31+0x7f/0x9c [ 1590.671962] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1590.671970] [] ? depot_save_stack+0x11c/0x470 [ 1590.671978] [] ? save_stack_trace+0x16/0x20 [ 1590.671987] [] ? xt_alloc_table_info+0x70/0x100 [ 1590.671996] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1590.672003] [] ? nf_setsockopt+0x6d/0xc0 [ 1590.672011] [] ? check_preemption_disabled+0x3b/0x200 [ 1590.672019] [] __vmalloc_node_range+0x35e/0x600 07:47:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1590.672027] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1590.672033] [] vmalloc+0x5b/0x70 07:47:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x1b) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000440)) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/28, 0x1c) clone(0x14000, &(0x7f00000000c0)="5383064098af7992e1d3a9d6369fba4cf36b1ebcff40dfb26bf6f1ccb82afb99d96d145153b9c17850b1419476289a03eb9fff9425d090", &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)="37f2aefd083c2c749198e8fc5fde7e9fc08db103581e0d44289e06b589b0d5a5b52c2b18d4c024d44f54f5f6124f5ff61be826f836eba5cb1f9b4205e5feab347eea63c5b524408cf77a2255497b812b51b19faba35101336397f60653849ea91c1785b6a393b438596a") setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000400)={0x3c, @multicast1, 0x4e20, 0x4, 'rr\x00', 0x8, 0xfff, 0x72}, 0x2c) r3 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000180)=0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x0) [ 1590.672040] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1590.672047] [] xt_alloc_entry_offsets+0x41/0x60 [ 1590.672055] [] translate_table+0x215/0x1690 [ 1590.672062] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1590.672082] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1590.672093] [] ? __check_object_size+0x248/0x38e [ 1590.672103] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1590.672115] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1590.672128] [] ? mutex_unlock+0x9/0x10 [ 1590.672138] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1590.672146] [] nf_setsockopt+0x6d/0xc0 [ 1590.672154] [] ipv6_setsockopt+0xc8/0x130 [ 1590.672160] [] tcp_setsockopt+0x88/0xe0 [ 1590.672168] [] sock_common_setsockopt+0x9a/0xe0 [ 1590.672176] [] SyS_setsockopt+0x166/0x260 [ 1590.672183] [] ? SyS_recv+0x40/0x40 [ 1590.672191] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1590.672198] [] ? SyS_clock_settime+0x220/0x220 [ 1590.672205] [] ? do_syscall_64+0x48/0x550 [ 1590.672212] [] ? SyS_recv+0x40/0x40 [ 1590.672219] [] do_syscall_64+0x19f/0x550 [ 1590.672227] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1590.672230] Mem-Info: [ 1590.672248] active_anon:219714 inactive_anon:455030 isolated_anon:0 [ 1590.672248] active_file:4909 inactive_file:21470 isolated_file:0 [ 1590.672248] unevictable:0 dirty:138 writeback:0 unstable:0 [ 1590.672248] slab_reclaimable:6997 slab_unreclaimable:69375 [ 1590.672248] mapped:73281 shmem:463370 pagetables:23218 bounce:0 [ 1590.672248] free:773121 free_pcp:513 free_cma:0 [ 1590.672266] Node 0 active_anon:878856kB inactive_anon:1820120kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:293124kB dirty:552kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1590.672292] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1590.672320] Normal free:78020kB min:5580kB low:9168kB high:12756kB active_anon:878784kB inactive_anon:1820120kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:552kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27988kB slab_unreclaimable:277092kB kernel_stack:31008kB pagetables:92772kB bounce:0kB free_pcp:624kB local_pcp:460kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1590.672373] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 511*4kB (UME) 439*8kB (UME) 211*16kB (UME) 164*32kB (UME) 119*64kB (UME) 147*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 77988kB 489748 total pagecache pages [ 1590.672426] 0 pages in swap cache [ 1590.672430] Swap cache stats: add 0, delete 0, find 0/0 [ 1590.672432] Free swap = 0kB [ 1590.672434] Total swap = 0kB [ 1590.672437] 1965979 pages RAM [ 1590.672439] 0 pages HighMem/MovableOnly [ 1590.672441] 313617 pages reserved [ 1591.016260] audit_printk_skb: 1701 callbacks suppressed [ 1591.016269] audit: type=1400 audit(1565077615.652:115729): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1591.019557] audit: type=1400 audit(1565077615.662:115730): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1591.020878] audit: type=1400 audit(1565077615.662:115731): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1591.021365] audit: type=1400 audit(1565077615.662:115732): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1591.023240] audit: type=1400 audit(1565077615.662:115733): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1591.024719] audit: type=1400 audit(1565077615.662:115734): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1591.026480] audit: type=1400 audit(1565077615.662:115735): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1591.027910] audit: type=1400 audit(1565077615.662:115736): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1591.030357] audit: type=1400 audit(1565077615.672:115737): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1591.037063] audit: type=1400 audit(1565077615.672:115738): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1591.605708] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1591.605719] CPU: 0 PID: 15807 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1591.605735] ffff88019a63f888 ffffffff81b42e79 1ffff100334c7f13 ffff8801d7784740 [ 1591.605747] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019a63f9d0 [ 1591.605759] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1591.605763] Call Trace: [ 1591.605778] [] dump_stack+0xc1/0x128 [ 1591.605788] [] warn_alloc.cold.31+0x7f/0x9c [ 1591.605797] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1591.605805] [] ? depot_save_stack+0x11c/0x470 [ 1591.605815] [] ? save_stack_trace+0x16/0x20 [ 1591.605823] [] ? xt_alloc_table_info+0x70/0x100 [ 1591.605831] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1591.605839] [] ? nf_setsockopt+0x6d/0xc0 [ 1591.605847] [] ? check_preemption_disabled+0x3b/0x200 [ 1591.605854] [] __vmalloc_node_range+0x35e/0x600 [ 1591.605863] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1591.605869] [] vmalloc+0x5b/0x70 [ 1591.605876] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1591.605883] [] xt_alloc_entry_offsets+0x41/0x60 [ 1591.605891] [] translate_table+0x215/0x1690 [ 1591.605898] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1591.605906] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1591.605914] [] ? __check_object_size+0x248/0x38e [ 1591.605922] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1591.605931] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1591.605940] [] ? mutex_unlock+0x9/0x10 [ 1591.605948] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1591.605956] [] nf_setsockopt+0x6d/0xc0 [ 1591.605966] [] ipv6_setsockopt+0xc8/0x130 [ 1591.605973] [] tcp_setsockopt+0x88/0xe0 [ 1591.605982] [] sock_common_setsockopt+0x9a/0xe0 [ 1591.605990] [] SyS_setsockopt+0x166/0x260 [ 1591.605996] [] ? SyS_recv+0x40/0x40 [ 1591.606005] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1591.606013] [] ? SyS_clock_settime+0x220/0x220 [ 1591.606020] [] ? do_syscall_64+0x48/0x550 [ 1591.606027] [] ? SyS_recv+0x40/0x40 [ 1591.606034] [] do_syscall_64+0x19f/0x550 [ 1591.606042] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1591.606045] Mem-Info: [ 1591.606064] active_anon:219586 inactive_anon:455031 isolated_anon:0 [ 1591.606064] active_file:4909 inactive_file:21470 isolated_file:0 [ 1591.606064] unevictable:0 dirty:138 writeback:0 unstable:0 [ 1591.606064] slab_reclaimable:6997 slab_unreclaimable:69390 [ 1591.606064] mapped:73238 shmem:463370 pagetables:23108 bounce:0 [ 1591.606064] free:773312 free_pcp:646 free_cma:0 [ 1591.606079] Node 0 active_anon:878344kB inactive_anon:1820124kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292952kB dirty:552kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1591.606104] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1591.606137] Normal free:78784kB min:5580kB low:9168kB high:12756kB active_anon:878272kB inactive_anon:1820124kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:552kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27988kB slab_unreclaimable:277152kB kernel_stack:30720kB pagetables:92332kB bounce:0kB free_pcp:1156kB local_pcp:652kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1591.606195] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 594*4kB (UME) 442*8kB (UME) 211*16kB (UME) 178*32kB (UME) 120*64kB (UME) 147*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 78856kB 489748 total pagecache pages [ 1591.606253] 0 pages in swap cache [ 1591.606257] Swap cache stats: add 0, delete 0, find 0/0 [ 1591.606259] Free swap = 0kB [ 1591.606261] Total swap = 0kB [ 1591.606264] 1965979 pages RAM [ 1591.606266] 0 pages HighMem/MovableOnly [ 1591.606268] 313617 pages reserved [ 1592.582638] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1592.582648] CPU: 1 PID: 15826 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1592.582666] ffff88013183f888 ffffffff81b42e79 1ffff10026307f13 ffff8801c8074740 [ 1592.582680] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88013183f9d0 [ 1592.582694] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1592.582696] Call Trace: [ 1592.582715] [] dump_stack+0xc1/0x128 [ 1592.582728] [] warn_alloc.cold.31+0x7f/0x9c [ 1592.582741] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1592.582752] [] ? depot_save_stack+0x11c/0x470 [ 1592.582765] [] ? save_stack_trace+0x16/0x20 [ 1592.582775] [] ? xt_alloc_table_info+0x70/0x100 [ 1592.582784] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1592.582793] [] ? nf_setsockopt+0x6d/0xc0 [ 1592.582802] [] ? check_preemption_disabled+0x3b/0x200 [ 1592.582810] [] __vmalloc_node_range+0x35e/0x600 [ 1592.582819] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1592.582827] [] vmalloc+0x5b/0x70 [ 1592.582835] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1592.582842] [] xt_alloc_entry_offsets+0x41/0x60 [ 1592.582851] [] translate_table+0x215/0x1690 [ 1592.582859] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1592.582868] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1592.582877] [] ? __check_object_size+0x248/0x38e [ 1592.582885] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1592.582894] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1592.582904] [] ? mutex_unlock+0x9/0x10 [ 1592.582911] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1592.582928] [] nf_setsockopt+0x6d/0xc0 [ 1592.582941] [] ipv6_setsockopt+0xc8/0x130 [ 1592.582950] [] tcp_setsockopt+0x88/0xe0 [ 1592.582963] [] sock_common_setsockopt+0x9a/0xe0 [ 1592.582973] [] SyS_setsockopt+0x166/0x260 [ 1592.582982] [] ? SyS_recv+0x40/0x40 [ 1592.582993] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1592.583001] [] ? SyS_clock_settime+0x220/0x220 [ 1592.583009] [] ? do_syscall_64+0x48/0x550 [ 1592.583016] [] ? SyS_recv+0x40/0x40 [ 1592.583024] [] do_syscall_64+0x19f/0x550 [ 1592.583032] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1592.583036] Mem-Info: [ 1592.583056] active_anon:219653 inactive_anon:455109 isolated_anon:0 [ 1592.583056] active_file:4909 inactive_file:21470 isolated_file:0 [ 1592.583056] unevictable:0 dirty:143 writeback:0 unstable:0 [ 1592.583056] slab_reclaimable:6995 slab_unreclaimable:69425 [ 1592.583056] mapped:73238 shmem:463386 pagetables:23183 bounce:0 [ 1592.583056] free:773125 free_pcp:459 free_cma:0 [ 1592.583072] Node 0 active_anon:878612kB inactive_anon:1820436kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292952kB dirty:572kB writeback:0kB shmem:1853544kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1592.583093] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1592.583122] Normal free:78036kB min:5580kB low:9168kB high:12756kB active_anon:878540kB inactive_anon:1820436kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:572kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27980kB slab_unreclaimable:277292kB kernel_stack:31136kB pagetables:92632kB bounce:0kB free_pcp:408kB local_pcp:244kB free_cma:0kB lowmem_reserve[]: 0 0 0 07:47:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:14 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$int_out(r0, 0x0, &(0x7f0000000340)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000001c0)=""/31) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00') read(r3, &(0x7f00000000c0)=""/253, 0xfd) fchdir(r3) ustat(0x1, &(0x7f0000000040)) [ 1592.583182] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 499*4kB (UME) 441*8kB (UME) 212*16kB (UME) 161*32kB (UME) 120*64kB (UME) 147*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 77940kB 489764 total pagecache pages [ 1592.583235] 0 pages in swap cache [ 1592.583239] Swap cache stats: add 0, delete 0, find 0/0 [ 1592.583241] Free swap = 0kB [ 1592.583243] Total swap = 0kB 07:47:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000200)=0x9, 0x4) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000240)=r3) setpgid(r3, r3) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xf, &(0x7f0000000140)=""/183, &(0x7f0000000000)=0xb7) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) tkill(r3, 0x3c) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1a) 07:47:14 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:47:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) 07:47:14 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs\x00') ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000000c0)='syz0\x00') setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, '.ppp1:[+#vboxnet1%'}, {0x20, '-'}, {0x20, 'user&]/'}, {0x20, 'selinux/.bdev,\x00'}, {0x20, 'syz0\x00'}], 0xa, "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"}, 0x13a) ftruncate(r2, 0x4000b) sendfile(r0, r2, 0x0, 0x802000000020011) [ 1592.583245] 1965979 pages RAM [ 1592.583247] 0 pages HighMem/MovableOnly [ 1592.583249] 313617 pages reserved [ 1592.682262] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) 07:47:14 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1592.682275] CPU: 1 PID: 15843 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1592.682294] ffff88013183f888 ffffffff81b42e79 1ffff10026307f13 ffff88019c224740 07:47:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)) [ 1592.682307] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88013183f9d0 [ 1592.682321] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1592.682323] Call Trace: 07:47:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x10, 0x759f6b0f77b22962) [ 1592.682342] [] dump_stack+0xc1/0x128 [ 1592.682355] [] warn_alloc.cold.31+0x7f/0x9c [ 1592.682368] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1592.682380] [] ? depot_save_stack+0x11c/0x470 [ 1592.682393] [] ? save_stack_trace+0x16/0x20 [ 1592.682402] [] ? xt_alloc_table_info+0x70/0x100 [ 1592.682412] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1592.682420] [] ? nf_setsockopt+0x6d/0xc0 [ 1592.682429] [] ? check_preemption_disabled+0x3b/0x200 07:47:15 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1592.682437] [] __vmalloc_node_range+0x35e/0x600 ** 24 printk messages dropped ** [ 1592.682616] Mem-Info: [ 1592.682640] active_anon:219653 inactive_anon:455109 isolated_anon:0 [ 1592.682640] active_file:4909 inactive_file:21470 isolated_file:0 [ 1592.682640] unevictable:0 dirty:143 writeback:0 unstable:0 [ 1592.682640] slab_reclaimable:6995 slab_unreclaimable:69425 [ 1592.682640] mapped:73213 shmem:463386 pagetables:23220 bounce:0 [ 1592.682640] free:773047 free_pcp:524 free_cma:0 07:47:15 executing program 1: stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) 07:47:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) ** 114 printk messages dropped ** [ 1593.542590] Node 0 active_anon:878544kB inactive_anon:1820408kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292852kB dirty:572kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1593.542615] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1593.542643] Normal free:78208kB min:5580kB low:9168kB high:12756kB active_anon:878472kB inactive_anon:1820408kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:572kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27964kB slab_unreclaimable:276936kB kernel_stack:30912kB pagetables:92612kB bounce:0kB free_pcp:1192kB local_pcp:468kB free_cma:0kB ** 109 printk messages dropped ** [ 1594.728135] Mem-Info: [ 1594.728156] active_anon:219670 inactive_anon:455105 isolated_anon:0 [ 1594.728156] active_file:4909 inactive_file:21470 isolated_file:0 [ 1594.728156] unevictable:0 dirty:143 writeback:0 unstable:0 [ 1594.728156] slab_reclaimable:6991 slab_unreclaimable:69427 [ 1594.728156] mapped:73213 shmem:463370 pagetables:23170 bounce:0 [ 1594.728156] free:773074 free_pcp:585 free_cma:0 [ 1594.728171] Node 0 active_anon:878680kB inactive_anon:1820420kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292852kB dirty:572kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1594.728192] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1594.728221] Normal free:77832kB min:5580kB low:9168kB high:12756kB active_anon:878608kB inactive_anon:1820420kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:572kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27964kB slab_unreclaimable:277300kB kernel_stack:31136kB pagetables:92580kB bounce:0kB free_pcp:912kB local_pcp:312kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1594.728278] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 396*4kB (UME) 441*8kB (UME) 215*16kB (UME) 166*32kB (UME) 120*64kB (UME) 147*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 77736kB 489748 total pagecache pages [ 1594.728337] 0 pages in swap cache [ 1594.728342] Swap cache stats: add 0, delete 0, find 0/0 [ 1594.728346] Free swap = 0kB [ 1594.728348] Total swap = 0kB [ 1594.728350] 1965979 pages RAM [ 1594.728354] 0 pages HighMem/MovableOnly [ 1594.728356] 313617 pages reserved [ 1595.191202] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1595.191213] CPU: 1 PID: 15898 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1595.191233] ffff88019da7f888 ffffffff81b42e79 1ffff10033b4ff13 ffff8801d514c740 [ 1595.191247] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019da7f9d0 [ 1595.191260] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1595.191262] Call Trace: [ 1595.191280] [] dump_stack+0xc1/0x128 [ 1595.191290] [] warn_alloc.cold.31+0x7f/0x9c [ 1595.191301] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1595.191312] [] ? depot_save_stack+0x11c/0x470 [ 1595.191325] [] ? save_stack_trace+0x16/0x20 [ 1595.191335] [] ? xt_alloc_table_info+0x70/0x100 [ 1595.191344] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1595.191353] [] ? nf_setsockopt+0x6d/0xc0 [ 1595.191362] [] ? check_preemption_disabled+0x3b/0x200 [ 1595.191371] [] __vmalloc_node_range+0x35e/0x600 [ 1595.191379] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1595.191386] [] vmalloc+0x5b/0x70 [ 1595.191395] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1595.191403] [] xt_alloc_entry_offsets+0x41/0x60 [ 1595.191411] [] translate_table+0x215/0x1690 [ 1595.191419] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1595.191428] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1595.191437] [] ? __check_object_size+0x248/0x38e [ 1595.191445] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1595.191454] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1595.191464] [] ? mutex_unlock+0x9/0x10 [ 1595.191472] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1595.191480] [] nf_setsockopt+0x6d/0xc0 [ 1595.191489] [] ipv6_setsockopt+0xc8/0x130 [ 1595.191497] [] tcp_setsockopt+0x88/0xe0 [ 1595.191505] [] sock_common_setsockopt+0x9a/0xe0 [ 1595.191513] [] SyS_setsockopt+0x166/0x260 [ 1595.191520] [] ? SyS_recv+0x40/0x40 [ 1595.191528] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1595.191536] [] ? SyS_clock_settime+0x220/0x220 [ 1595.191543] [] ? do_syscall_64+0x48/0x550 [ 1595.191551] [] ? SyS_recv+0x40/0x40 [ 1595.191558] [] do_syscall_64+0x19f/0x550 [ 1595.191567] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1595.191570] Mem-Info: [ 1595.191590] active_anon:219620 inactive_anon:455105 isolated_anon:0 [ 1595.191590] active_file:4909 inactive_file:21470 isolated_file:0 [ 1595.191590] unevictable:0 dirty:143 writeback:0 unstable:0 [ 1595.191590] slab_reclaimable:6991 slab_unreclaimable:69427 [ 1595.191590] mapped:73263 shmem:463370 pagetables:23170 bounce:0 [ 1595.191590] free:773194 free_pcp:547 free_cma:0 [ 1595.191606] Node 0 active_anon:878480kB inactive_anon:1820420kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:293052kB dirty:572kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1595.191626] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1595.191656] Normal free:78312kB min:5580kB low:9168kB high:12756kB active_anon:878408kB inactive_anon:1820420kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:572kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27964kB slab_unreclaimable:277300kB kernel_stack:30880kB pagetables:92580kB bounce:0kB free_pcp:760kB local_pcp:368kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1595.191723] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 518*4kB (UME) 442*8kB (UME) 214*16kB (UME) 170*32kB (UME) 121*64kB (UME) 147*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 78408kB 489748 total pagecache pages [ 1595.191786] 0 pages in swap cache [ 1595.191792] Swap cache stats: add 0, delete 0, find 0/0 [ 1595.191794] Free swap = 0kB [ 1595.191797] Total swap = 0kB [ 1595.191799] 1965979 pages RAM [ 1595.191800] 0 pages HighMem/MovableOnly [ 1595.191802] 313617 pages reserved [ 1595.269948] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1595.269959] CPU: 1 PID: 15904 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1595.269979] ffff880107c27888 ffffffff81b42e79 1ffff10020f84f13 ffff8801914e4740 [ 1595.269992] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff880107c279d0 [ 1595.270004] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1595.270006] Call Trace: [ 1595.270021] [] dump_stack+0xc1/0x128 [ 1595.270033] [] warn_alloc.cold.31+0x7f/0x9c [ 1595.270046] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1595.270054] [] ? depot_save_stack+0x11c/0x470 [ 1595.270064] [] ? save_stack_trace+0x16/0x20 [ 1595.270074] [] ? xt_alloc_table_info+0x70/0x100 [ 1595.270087] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1595.270094] [] ? nf_setsockopt+0x6d/0xc0 [ 1595.270104] [] ? check_preemption_disabled+0x3b/0x200 [ 1595.270112] [] __vmalloc_node_range+0x35e/0x600 [ 1595.270121] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1595.270128] [] vmalloc+0x5b/0x70 [ 1595.270136] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1595.270144] [] xt_alloc_entry_offsets+0x41/0x60 [ 1595.270152] [] translate_table+0x215/0x1690 [ 1595.270159] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1595.270168] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1595.270177] [] ? __check_object_size+0x248/0x38e [ 1595.270185] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1595.270194] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1595.270203] [] ? mutex_unlock+0x9/0x10 [ 1595.270211] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1595.270219] [] nf_setsockopt+0x6d/0xc0 [ 1595.270229] [] ipv6_setsockopt+0xc8/0x130 [ 1595.270237] [] tcp_setsockopt+0x88/0xe0 [ 1595.270246] [] sock_common_setsockopt+0x9a/0xe0 [ 1595.270254] [] SyS_setsockopt+0x166/0x260 [ 1595.270261] [] ? SyS_recv+0x40/0x40 [ 1595.270271] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1595.270279] [] ? SyS_clock_settime+0x220/0x220 [ 1595.270287] [] ? task_work_run+0x14a/0x180 [ 1595.270295] [] ? do_syscall_64+0x48/0x550 [ 1595.270302] [] ? SyS_recv+0x40/0x40 [ 1595.270310] [] do_syscall_64+0x19f/0x550 [ 1595.270318] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1595.270322] Mem-Info: [ 1595.270343] active_anon:219620 inactive_anon:455105 isolated_anon:0 [ 1595.270343] active_file:4909 inactive_file:21470 isolated_file:0 [ 1595.270343] unevictable:0 dirty:143 writeback:0 unstable:0 [ 1595.270343] slab_reclaimable:6991 slab_unreclaimable:69427 [ 1595.270343] mapped:73263 shmem:463370 pagetables:23207 bounce:0 [ 1595.270343] free:773140 free_pcp:500 free_cma:0 [ 1595.270360] Node 0 active_anon:878480kB inactive_anon:1820420kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:293052kB dirty:572kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1595.270381] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1595.270408] Normal free:78096kB min:5580kB low:9168kB high:12756kB active_anon:878408kB inactive_anon:1820420kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:572kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27964kB slab_unreclaimable:277300kB kernel_stack:31040kB pagetables:92728kB bounce:0kB free_pcp:572kB local_pcp:276kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1595.270476] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 456*4kB (UME) 442*8kB (UME) 214*16kB (UME) 165*32kB (UME) 121*64kB (UME) 147*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 78000kB 489748 total pagecache pages [ 1595.270532] 0 pages in swap cache [ 1595.270537] Swap cache stats: add 0, delete 0, find 0/0 [ 1595.270539] Free swap = 0kB [ 1595.270541] Total swap = 0kB [ 1595.270544] 1965979 pages RAM [ 1595.270546] 0 pages HighMem/MovableOnly [ 1595.270548] 313617 pages reserved [ 1596.044650] audit_printk_skb: 1671 callbacks suppressed [ 1596.044659] audit: type=1400 audit(1565077620.612:116291): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1596.046656] audit: type=1400 audit(1565077620.682:116297): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1596.085514] audit: type=1400 audit(1565077620.722:116298): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1596.099575] audit: type=1400 audit(1565077620.742:116299): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1596.101575] audit: type=1400 audit(1565077620.742:116300): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1596.103403] audit: type=1400 audit(1565077620.742:116301): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1596.105283] audit: type=1400 audit(1565077620.742:116302): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1596.107031] audit: type=1400 audit(1565077620.742:116303): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1596.146331] audit: type=1400 audit(1565077620.782:116304): avc: denied { net_admin } for pid=15927 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1596.146374] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1596.146384] CPU: 0 PID: 15928 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1596.146403] ffff8801c443f888 ffffffff81b42e79 1ffff10038887f13 ffff8801c497df00 [ 1596.146417] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801c443f9d0 [ 1596.146431] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1596.146434] Call Trace: [ 1596.146455] [] dump_stack+0xc1/0x128 [ 1596.146465] [] warn_alloc.cold.31+0x7f/0x9c [ 1596.146475] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1596.146484] [] ? depot_save_stack+0x11c/0x470 [ 1596.146494] [] ? save_stack_trace+0x16/0x20 [ 1596.146503] [] ? xt_alloc_table_info+0x70/0x100 [ 1596.146512] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1596.146520] [] ? nf_setsockopt+0x6d/0xc0 [ 1596.146529] [] ? check_preemption_disabled+0x3b/0x200 [ 1596.146537] [] __vmalloc_node_range+0x35e/0x600 [ 1596.146546] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1596.146553] [] vmalloc+0x5b/0x70 [ 1596.146561] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1596.146569] [] xt_alloc_entry_offsets+0x41/0x60 [ 1596.146578] [] translate_table+0x215/0x1690 [ 1596.146586] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1596.146595] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1596.146603] [] ? __check_object_size+0x248/0x38e [ 1596.146611] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1596.146620] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1596.146630] [] ? mutex_unlock+0x9/0x10 07:47:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) gettid() 07:47:17 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:47:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs\x00') ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000000c0)='syz0\x00') setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, '.ppp1:[+#vboxnet1%'}, {0x20, '-'}, {0x20, 'user&]/'}, {0x20, 'selinux/.bdev,\x00'}, {0x20, 'syz0\x00'}], 0xa, "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"}, 0x13a) ftruncate(r2, 0x4000b) sendfile(r0, r2, 0x0, 0x802000000020011) 07:47:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80800) sendfile(r0, r1, 0x0, 0x802000000020011) [ 1596.146637] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1596.146646] [] nf_setsockopt+0x6d/0xc0 [ 1596.146656] [] ipv6_setsockopt+0xc8/0x130 [ 1596.146664] [] tcp_setsockopt+0x88/0xe0 [ 1596.146672] [] sock_common_setsockopt+0x9a/0xe0 [ 1596.146680] [] SyS_setsockopt+0x166/0x260 [ 1596.146687] [] ? SyS_recv+0x40/0x40 [ 1596.146697] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1596.146705] [] ? SyS_clock_settime+0x220/0x220 [ 1596.146713] [] ? do_syscall_64+0x48/0x550 [ 1596.146720] [] ? SyS_recv+0x40/0x40 [ 1596.146727] [] do_syscall_64+0x19f/0x550 07:47:18 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1596.146742] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1596.147143] Mem-Info: [ 1596.147174] active_anon:219682 inactive_anon:455103 isolated_anon:0 [ 1596.147174] active_file:4909 inactive_file:21470 isolated_file:0 [ 1596.147174] unevictable:0 dirty:143 writeback:0 unstable:0 [ 1596.147174] slab_reclaimable:6991 slab_unreclaimable:69522 [ 1596.147174] mapped:73242 shmem:463385 pagetables:23164 bounce:0 [ 1596.147174] free:772493 free_pcp:512 free_cma:0 07:47:18 executing program 2: r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') exit(0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)=""/68) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r0}) [ 1596.147474] Node 0 active_anon:878728kB inactive_anon:1820412kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292968kB dirty:572kB writeback:0kB shmem:1853540kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1596.147501] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB 07:47:18 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:47:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x0) sendto$inet6(r0, &(0x7f00000002c0)="ea3dcb471b8224bee55c302167a53263bae1707c14186c6078ecf08a1766890c93a21e56fa7a6212b7ebc3b5a9179b667673a6e6ec9f5cbce8ab116ee8988dc372eb864e9a09548d75dd9e006f1b1eda3e08c7a30053401a84eab5bd911527cee3b39dae068331415320cc3c4fd9f0b0bdd3e0e80162c6add8a4dc071d7f44faaf543dbb9fd206b6a6b547133416bc1f264c06f4cd03b485079360fb406ffdd88f8c816d2be628a827807ea9fbda12216388daf973438790f092b0a127e654da7aeca8b747699d60c413ef460e12a5e157ce7371e035109b82f7ae988b6bba1a63dde8e41672c4ce4f55d953", 0xec, 0x800, &(0x7f00000003c0)={0xa, 0x4e23, 0x2, @empty, 0x8}, 0x1c) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@md5={0x1, "746529552abee74e1ad4bcb398772564"}, 0x11, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x3) lowmem_reserve[]: 0 3505 3505 07:47:18 executing program 1: r0 = socket$inet(0x2, 0x4040000000000003, 0x717) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) [ 1596.147531] Normal free:75508kB min:5580kB low:9168kB high:12756kB active_anon:878656kB inactive_anon:1820412kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:572kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27964kB slab_unreclaimable:277680kB kernel_stack:31040kB pagetables:92556kB bounce:0kB free_pcp:620kB local_pcp:244kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1596.147587] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 425*4kB (UME) 432*8kB (UME) 213*16kB (UME) 141*32kB (UME) 97*64kB (UME) 147*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 75476kB 489763 total pagecache pages [ 1596.147637] 0 pages in swap cache [ 1596.147641] Swap cache stats: add 0, delete 0, find 0/0 [ 1596.147643] Free swap = 0kB 07:47:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e70096ef2ded3bbb39c3b08713d08fc0749fb9f9cb4139dcc04ddee6513da44c6929e789908f6238762abae6a96a78ccb1ec7d2c827c1df92ad4f7283627c9f28e1b0768eb23129b3db714"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) [ 1596.147645] Total swap = 0kB [ 1596.147648] 1965979 pages RAM 07:47:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) fchdir(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) [ 1596.147650] 0 pages HighMem/MovableOnly [ 1596.147652] 313617 pages reserved [ 1596.191149] audit: type=1400 audit(1565077620.832:116305): avc: denied { net_admin } for pid=15903 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1596.191190] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1596.191201] CPU: 1 PID: 15913 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1596.191220] ffff88012dd77888 ffffffff81b42e79 1ffff10025baef13 ffff8801c50ec740 [ 1596.191233] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88012dd779d0 [ 1596.191244] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1596.191246] Call Trace: [ 1596.191261] [] dump_stack+0xc1/0x128 [ 1596.191272] [] warn_alloc.cold.31+0x7f/0x9c [ 1596.191285] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1596.191292] [] ? depot_save_stack+0x11c/0x470 [ 1596.191302] [] ? save_stack_trace+0x16/0x20 [ 1596.191310] [] ? xt_alloc_table_info+0x70/0x100 [ 1596.191319] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1596.191328] [] ? nf_setsockopt+0x6d/0xc0 [ 1596.191339] [] ? check_preemption_disabled+0x3b/0x200 [ 1596.191348] [] __vmalloc_node_range+0x35e/0x600 [ 1596.191357] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1596.191364] [] vmalloc+0x5b/0x70 [ 1596.191371] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1596.191378] [] xt_alloc_entry_offsets+0x41/0x60 [ 1596.191386] [] translate_table+0x215/0x1690 [ 1596.191393] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1596.191402] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1596.191410] [] ? __check_object_size+0x248/0x38e [ 1596.191418] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1596.191426] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1596.191436] [] ? mutex_unlock+0x9/0x10 [ 1596.191444] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1596.191451] [] nf_setsockopt+0x6d/0xc0 [ 1596.191461] [] ipv6_setsockopt+0xc8/0x130 [ 1596.191468] [] tcp_setsockopt+0x88/0xe0 [ 1596.191476] [] sock_common_setsockopt+0x9a/0xe0 [ 1596.191483] [] SyS_setsockopt+0x166/0x260 [ 1596.191489] [] ? SyS_recv+0x40/0x40 [ 1596.191499] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1596.191506] [] ? SyS_clock_settime+0x220/0x220 [ 1596.191513] [] ? do_syscall_64+0x48/0x550 [ 1596.191520] [] ? SyS_recv+0x40/0x40 [ 1596.191526] [] do_syscall_64+0x19f/0x550 [ 1596.191534] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1596.191538] Mem-Info: [ 1596.191560] active_anon:219682 inactive_anon:455103 isolated_anon:0 [ 1596.191560] active_file:4909 inactive_file:21470 isolated_file:0 [ 1596.191560] unevictable:0 dirty:143 writeback:0 unstable:0 [ 1596.191560] slab_reclaimable:6991 slab_unreclaimable:69522 [ 1596.191560] mapped:73217 shmem:463385 pagetables:23238 bounce:0 [ 1596.191560] free:772461 free_pcp:489 free_cma:0 [ 1596.191577] Node 0 active_anon:878728kB inactive_anon:1820412kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292868kB dirty:572kB writeback:0kB shmem:1853540kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1596.191594] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1596.191621] Normal free:75380kB min:5580kB low:9168kB high:12756kB active_anon:878656kB inactive_anon:1820412kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:572kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27964kB slab_unreclaimable:277680kB kernel_stack:31168kB pagetables:92852kB bounce:0kB free_pcp:528kB local_pcp:228kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1596.191694] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 425*4kB (UME) 432*8kB (UME) 213*16kB (UME) 137*32kB (UME) 97*64kB (UME) 147*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 75348kB 489763 total pagecache pages [ 1596.191742] 0 pages in swap cache [ 1596.191745] Swap cache stats: add 0, delete 0, find 0/0 [ 1596.191747] Free swap = 0kB [ 1596.191749] Total swap = 0kB [ 1596.191752] 1965979 pages RAM [ 1596.191753] 0 pages HighMem/MovableOnly [ 1596.191755] 313617 pages reserved [ 1599.569301] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1599.569313] CPU: 0 PID: 15987 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1599.569333] ffff88018c9ef888 ffffffff81b42e79 1ffff1003193df13 ffff8801c4122f80 [ 1599.569346] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88018c9ef9d0 [ 1599.569360] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1599.569363] Call Trace: [ 1599.569377] [] dump_stack+0xc1/0x128 [ 1599.569387] [] warn_alloc.cold.31+0x7f/0x9c [ 1599.569397] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1599.569408] [] ? depot_save_stack+0x11c/0x470 [ 1599.569421] [] ? save_stack_trace+0x16/0x20 [ 1599.569431] [] ? xt_alloc_table_info+0x70/0x100 [ 1599.569440] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1599.569449] [] ? nf_setsockopt+0x6d/0xc0 [ 1599.569458] [] ? check_preemption_disabled+0x3b/0x200 [ 1599.569466] [] __vmalloc_node_range+0x35e/0x600 [ 1599.569475] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1599.569483] [] vmalloc+0x5b/0x70 [ 1599.569491] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1599.569498] [] xt_alloc_entry_offsets+0x41/0x60 [ 1599.569506] [] translate_table+0x215/0x1690 [ 1599.569514] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1599.569523] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1599.569531] [] ? __check_object_size+0x248/0x38e [ 1599.569540] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1599.569549] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1599.569558] [] ? mutex_unlock+0x9/0x10 [ 1599.569567] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1599.569575] [] nf_setsockopt+0x6d/0xc0 [ 1599.569584] [] ipv6_setsockopt+0xc8/0x130 [ 1599.569592] [] tcp_setsockopt+0x88/0xe0 [ 1599.569601] [] sock_common_setsockopt+0x9a/0xe0 [ 1599.569609] [] SyS_setsockopt+0x166/0x260 [ 1599.569616] [] ? SyS_recv+0x40/0x40 [ 1599.569625] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1599.569633] [] ? SyS_clock_settime+0x220/0x220 [ 1599.569641] [] ? do_syscall_64+0x48/0x550 [ 1599.569648] [] ? SyS_recv+0x40/0x40 [ 1599.569655] [] do_syscall_64+0x19f/0x550 [ 1599.569664] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1599.569668] Mem-Info: [ 1599.569689] active_anon:219651 inactive_anon:455111 isolated_anon:0 [ 1599.569689] active_file:4909 inactive_file:21470 isolated_file:0 [ 1599.569689] unevictable:0 dirty:127 writeback:0 unstable:0 [ 1599.569689] slab_reclaimable:6989 slab_unreclaimable:69556 [ 1599.569689] mapped:73259 shmem:463370 pagetables:23159 bounce:0 [ 1599.569689] free:772456 free_pcp:672 free_cma:0 [ 1599.569704] Node 0 active_anon:878604kB inactive_anon:1820444kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:293036kB dirty:508kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1599.569725] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1599.569754] Normal free:75360kB min:5580kB low:9168kB high:12756kB active_anon:878532kB inactive_anon:1820444kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:508kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27956kB slab_unreclaimable:277816kB kernel_stack:30880kB pagetables:92536kB bounce:0kB free_pcp:1260kB local_pcp:612kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1599.569814] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 468*4kB (UME) 418*8kB (UME) 202*16kB (UME) 135*32kB (UME) 98*64kB (UME) 148*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 75360kB 489748 total pagecache pages [ 1599.569876] 0 pages in swap cache [ 1599.569883] Swap cache stats: add 0, delete 0, find 0/0 [ 1599.569885] Free swap = 0kB [ 1599.569888] Total swap = 0kB [ 1599.569891] 1965979 pages RAM [ 1599.569893] 0 pages HighMem/MovableOnly [ 1599.569896] 313617 pages reserved [ 1599.632569] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1599.632578] CPU: 0 PID: 15989 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1599.632589] ffff88010e307888 ffffffff81b42e79 1ffff10021c60f13 ffff8801a44cdf00 [ 1599.632597] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88010e3079d0 [ 1599.632605] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1599.632606] Call Trace: [ 1599.632621] [] dump_stack+0xc1/0x128 [ 1599.632630] [] warn_alloc.cold.31+0x7f/0x9c [ 1599.632640] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1599.632648] [] ? depot_save_stack+0x11c/0x470 [ 1599.632658] [] ? save_stack_trace+0x16/0x20 [ 1599.632666] [] ? xt_alloc_table_info+0x70/0x100 [ 1599.632675] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1599.632682] [] ? nf_setsockopt+0x6d/0xc0 [ 1599.632690] [] ? check_preemption_disabled+0x3b/0x200 [ 1599.632697] [] __vmalloc_node_range+0x35e/0x600 [ 1599.632705] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1599.632712] [] vmalloc+0x5b/0x70 [ 1599.632719] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1599.632726] [] xt_alloc_entry_offsets+0x41/0x60 [ 1599.632733] [] translate_table+0x215/0x1690 [ 1599.632740] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1599.632748] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1599.632756] [] ? __check_object_size+0x248/0x38e [ 1599.632764] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1599.632772] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1599.632781] [] ? mutex_unlock+0x9/0x10 [ 1599.632788] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1599.632795] [] nf_setsockopt+0x6d/0xc0 [ 1599.632805] [] ipv6_setsockopt+0xc8/0x130 [ 1599.632812] [] tcp_setsockopt+0x88/0xe0 [ 1599.632820] [] sock_common_setsockopt+0x9a/0xe0 [ 1599.632827] [] SyS_setsockopt+0x166/0x260 [ 1599.632834] [] ? SyS_recv+0x40/0x40 [ 1599.632842] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1599.632849] [] ? SyS_clock_settime+0x220/0x220 [ 1599.632863] [] ? do_syscall_64+0x48/0x550 [ 1599.632869] [] ? SyS_recv+0x40/0x40 [ 1599.632876] [] do_syscall_64+0x19f/0x550 [ 1599.632883] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1599.632887] Mem-Info: [ 1599.632905] active_anon:219651 inactive_anon:455111 isolated_anon:0 [ 1599.632905] active_file:4909 inactive_file:21470 isolated_file:0 [ 1599.632905] unevictable:0 dirty:127 writeback:0 unstable:0 [ 1599.632905] slab_reclaimable:6989 slab_unreclaimable:69556 [ 1599.632905] mapped:73259 shmem:463370 pagetables:23159 bounce:0 [ 1599.632905] free:772456 free_pcp:677 free_cma:0 [ 1599.632937] Node 0 active_anon:878604kB inactive_anon:1820444kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:293036kB dirty:508kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:47:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:21 executing program 2: r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2ccc0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0x1f6}], 0x3}}], 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4e13473b89fbc45cf6e43c476c0937d1f72e54cff2ab3e002db95212b9e7236a506d02d973b73cb46991d30db9adc280ecc37d8563a314037854942c981f125c9b9cb8333854deac7366a73846ee3cd44315a2c92f4d9ec3f47367c8c650aceccc3e35cc45b1a9cc7e2778d9fed05451a5549dfc5d73bfecc558d4eeb7e220f28bf1925b84f9e32c", @ANYRES32, @ANYBLOB="afabe794fb8e7584e626469620602b523baf8406cb1af9c32be46a"], 0x0, 0xa7}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:47:21 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:47:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x2000000000000278) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="651d676c6500005607f5110000000000000000000000400000000004b3a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"/88], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) tkill(r3, 0x0) 07:47:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip6tnl0\x00', 0xfffffffffffffff9) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x220000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/86, 0x56}, @fda={0x66646185, 0x1, 0x1, 0x3a}, @fda={0x66646185, 0x4, 0x2, 0x5}}, &(0x7f0000000140)={0x0, 0x28, 0x48}}, 0x1000}], 0xb4, 0x0, &(0x7f0000000340)="9546daa6d498515b475329b11ea216482919d9d760e998aa632b38b0a7613c9bb8b55bb40045aebf68f02f5407f36321f28e6e87b697bb9618b82be69c83161b5e6d2ceccd9d0fba1014862068b1744de5156d631a1548ccfe199f1f74da0f8b661d91f4be9dbabacf6d65a31f12936517a7f4c3650048c6f5e6b94016423816d9d9455bf6e209d3bc3a07c1ceebd2e7aa5e5dba2cb63e365aa8a5ff70664400402804159c3196ce5d0d09952544584eb21caaff"}) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000400), &(0x7f0000000440)=0x8) 07:47:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpid() wait4(r2, &(0x7f00000001c0), 0x1000002, 0x0) fcntl$getflags(r1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r3 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff8, 0x0, 0x6, 0xa, 0x8, "c196c794cdd906129f347fe9e2595b057c0a63d2bf8eabfc038437643c7a89873d860eb14cee6f3ee02231f3a8f007aea818a8b22839a452b892d9cfd2c48937", "550ec798ac7e47501fbc215e011c9ee511e498d09bfa1124cea1cac272e027a1a6535ef7192c2b83c1140c319d4cd658f9e25605f617abfd5a8ae53f9d760065", "ee4afcadb54871a7e3cd90b2d2fe2ba5d48f460525180d6b336b2afb9d496d47", [0x1, 0x80]}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = dup2(r4, r4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)=ANY=[], 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) tkill(r6, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r7 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e00000000000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f3170000000000000000000000006795ffdd4c88e5b6a56a85bbcb8243c361c44d1b94364e7943d460b48b30777c244f5e8eec77003dd241ec65e41c1d5a9c8c5d8b59c20af6c39aa4f8e7909f9d1ab8db8a199e886c0e5188cc5ace07176c2306cb9ef1e842d56f4730853e1ac018a7bcf8ba3b9894bd64e52361019ade86343e5fa0657c3414b305d47ea7af9f6bbc0f91243b67577dcadab75265df4ea801"], 0x1) ptrace$setopts(0x4206, r7, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) wait4(0x0, 0x0, 0x0, 0x0) tkill(r7, 0x3c) [ 1599.632956] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1599.632982] Normal free:75360kB min:5580kB low:9168kB high:12756kB active_anon:878532kB inactive_anon:1820444kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:508kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27956kB slab_unreclaimable:277816kB kernel_stack:30880kB pagetables:92536kB bounce:0kB free_pcp:1280kB local_pcp:720kB free_cma:0kB 07:47:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x18000000000000) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000002380)=""/4096) 07:47:21 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:47:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) waitid(0x2, r3, &(0x7f0000000140), 0x40000000, 0x0) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x0) lowmem_reserve[]: 0 0 0 07:47:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x90000, 0x0) sendfile(r0, r1, 0x0, 0x802000000020011) [ 1599.633037] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 468*4kB (UME) 418*8kB (UME) 202*16kB (UME) 135*32kB (UME) 98*64kB (UME) 148*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 75360kB 489748 total pagecache pages [ 1599.633086] 0 pages in swap cache [ 1599.633090] Swap cache stats: add 0, delete 0, find 0/0 [ 1599.633092] Free swap = 0kB [ 1599.633094] Total swap = 0kB [ 1599.633096] 1965979 pages RAM [ 1599.633098] 0 pages HighMem/MovableOnly [ 1599.633100] 313617 pages reserved [ 1600.191065] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1600.191077] CPU: 1 PID: 16001 Comm: syz-executor.4 Not tainted 4.9.141+ #1 07:47:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) 07:47:22 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1600.191094] ffff88019374f888 ffffffff81b42e79 1ffff100326e9f13 ffff8801c5e20000 [ 1600.191108] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019374f9d0 [ 1600.191118] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1600.191120] Call Trace: [ 1600.191136] [] dump_stack+0xc1/0x128 [ 1600.191146] [] warn_alloc.cold.31+0x7f/0x9c [ 1600.191156] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1600.191166] [] ? depot_save_stack+0x11c/0x470 [ 1600.191179] [] ? save_stack_trace+0x16/0x20 [ 1600.191188] [] ? xt_alloc_table_info+0x70/0x100 [ 1600.191197] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1600.191204] [] ? nf_setsockopt+0x6d/0xc0 [ 1600.191213] [] ? check_preemption_disabled+0x3b/0x200 [ 1600.191221] [] __vmalloc_node_range+0x35e/0x600 [ 1600.191230] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1600.191237] [] vmalloc+0x5b/0x70 [ 1600.191245] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1600.191253] [] xt_alloc_entry_offsets+0x41/0x60 [ 1600.191261] [] translate_table+0x215/0x1690 [ 1600.191268] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1600.191276] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1600.191284] [] ? __check_object_size+0x248/0x38e [ 1600.191291] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1600.191299] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1600.191307] [] ? mutex_unlock+0x9/0x10 [ 1600.191327] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1600.191337] [] nf_setsockopt+0x6d/0xc0 [ 1600.191351] [] ipv6_setsockopt+0xc8/0x130 [ 1600.191360] [] tcp_setsockopt+0x88/0xe0 [ 1600.191373] [] sock_common_setsockopt+0x9a/0xe0 [ 1600.191381] [] SyS_setsockopt+0x166/0x260 [ 1600.191388] [] ? SyS_recv+0x40/0x40 [ 1600.191396] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1600.191405] [] ? SyS_clock_settime+0x220/0x220 [ 1600.191412] [] ? do_syscall_64+0x48/0x550 [ 1600.191419] [] ? SyS_recv+0x40/0x40 [ 1600.191426] [] do_syscall_64+0x19f/0x550 [ 1600.191433] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1600.191437] Mem-Info: [ 1600.191456] active_anon:219689 inactive_anon:455111 isolated_anon:0 [ 1600.191456] active_file:4909 inactive_file:21470 isolated_file:0 [ 1600.191456] unevictable:0 dirty:127 writeback:0 unstable:0 [ 1600.191456] slab_reclaimable:6989 slab_unreclaimable:69621 [ 1600.191456] mapped:73216 shmem:463370 pagetables:23228 bounce:0 [ 1600.191456] free:772391 free_pcp:440 free_cma:0 [ 1600.191471] Node 0 active_anon:878756kB inactive_anon:1820444kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292864kB dirty:508kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1600.191494] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1600.191529] Normal free:75100kB min:5580kB low:9168kB high:12756kB active_anon:878684kB inactive_anon:1820444kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:508kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27956kB slab_unreclaimable:278076kB kernel_stack:31072kB pagetables:92812kB bounce:0kB free_pcp:332kB local_pcp:168kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1600.191583] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 483*4kB (UME) 428*8kB (UME) 203*16kB (UME) 134*32kB (UME) 92*64kB (UME) 148*128kB (UM) 62*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 75100kB 489748 total pagecache pages [ 1600.191644] 0 pages in swap cache [ 1600.191648] Swap cache stats: add 0, delete 0, find 0/0 [ 1600.191650] Free swap = 0kB [ 1600.191652] Total swap = 0kB [ 1600.191655] 1965979 pages RAM [ 1600.191657] 0 pages HighMem/MovableOnly [ 1600.191659] 313617 pages reserved [ 1601.000540] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1601.000550] CPU: 0 PID: 16034 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1601.000569] ffff8801a70d7888 ffffffff81b42e79 1ffff10034e1af13 ffff8801c4ae2f80 [ 1601.000582] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801a70d79d0 [ 1601.000595] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1601.000597] Call Trace: [ 1601.000615] [] dump_stack+0xc1/0x128 [ 1601.000629] [] warn_alloc.cold.31+0x7f/0x9c [ 1601.000640] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1601.000649] [] ? depot_save_stack+0x11c/0x470 [ 1601.000660] [] ? save_stack_trace+0x16/0x20 [ 1601.000669] [] ? xt_alloc_table_info+0x70/0x100 [ 1601.000678] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1601.000686] [] ? nf_setsockopt+0x6d/0xc0 [ 1601.000695] [] ? check_preemption_disabled+0x3b/0x200 [ 1601.000704] [] __vmalloc_node_range+0x35e/0x600 [ 1601.000712] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1601.000720] [] vmalloc+0x5b/0x70 [ 1601.000728] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1601.000736] [] xt_alloc_entry_offsets+0x41/0x60 [ 1601.000744] [] translate_table+0x215/0x1690 [ 1601.000762] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1601.000775] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1601.000786] [] ? __check_object_size+0x248/0x38e [ 1601.000797] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1601.000809] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1601.000822] [] ? mutex_unlock+0x9/0x10 [ 1601.000832] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1601.000842] [] nf_setsockopt+0x6d/0xc0 [ 1601.000851] [] ipv6_setsockopt+0xc8/0x130 [ 1601.000859] [] tcp_setsockopt+0x88/0xe0 [ 1601.000867] [] sock_common_setsockopt+0x9a/0xe0 [ 1601.000875] [] SyS_setsockopt+0x166/0x260 [ 1601.000881] [] ? SyS_recv+0x40/0x40 [ 1601.000891] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1601.000898] [] ? SyS_clock_settime+0x220/0x220 [ 1601.000905] [] ? do_syscall_64+0x48/0x550 [ 1601.000912] [] ? SyS_recv+0x40/0x40 [ 1601.000919] [] do_syscall_64+0x19f/0x550 [ 1601.000928] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1601.007634] Mem-Info: [ 1601.007663] active_anon:219703 inactive_anon:455113 isolated_anon:0 [ 1601.007663] active_file:4909 inactive_file:21470 isolated_file:0 [ 1601.007663] unevictable:0 dirty:129 writeback:0 unstable:0 [ 1601.007663] slab_reclaimable:6989 slab_unreclaimable:69536 [ 1601.007663] mapped:73229 shmem:463370 pagetables:23197 bounce:0 [ 1601.007663] free:772346 free_pcp:670 free_cma:0 [ 1601.007683] Node 0 active_anon:878812kB inactive_anon:1820452kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292916kB dirty:516kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1601.007711] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1601.007742] Normal free:74920kB min:5580kB low:9168kB high:12756kB active_anon:878740kB inactive_anon:1820452kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:516kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27956kB slab_unreclaimable:277736kB kernel_stack:31040kB pagetables:92688kB bounce:0kB free_pcp:1252kB local_pcp:552kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1601.007811] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 521*4kB (UME) 428*8kB (UME) 208*16kB (UME) 148*32kB (UME) 92*64kB (UME) 147*128kB (UM) 59*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74884kB 489748 total pagecache pages [ 1601.007857] 0 pages in swap cache [ 1601.007861] Swap cache stats: add 0, delete 0, find 0/0 [ 1601.007862] Free swap = 0kB [ 1601.007864] Total swap = 0kB [ 1601.007867] 1965979 pages RAM [ 1601.007869] 0 pages HighMem/MovableOnly [ 1601.007871] 313617 pages reserved [ 1601.055941] audit_printk_skb: 1650 callbacks suppressed [ 1601.055949] audit: type=1400 audit(1565077625.692:116856): avc: denied { sys_admin } for pid=2100 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1601.130567] audit: type=1400 audit(1565077625.772:116857): avc: denied { sys_admin } for pid=2100 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1601.140290] audit: type=1400 audit(1565077625.782:116858): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1601.142143] audit: type=1400 audit(1565077625.782:116859): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1601.144795] audit: type=1400 audit(1565077625.782:116860): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1601.146595] audit: type=1400 audit(1565077625.782:116861): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1601.148459] audit: type=1400 audit(1565077625.782:116862): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1601.166583] audit: type=1400 audit(1565077625.802:116863): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1601.167569] audit: type=1400 audit(1565077625.802:116864): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1601.173444] audit: type=1400 audit(1565077625.812:116865): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1601.201693] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1601.201704] CPU: 1 PID: 16034 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1601.201722] ffff8801a70d7888 ffffffff81b42e79 1ffff10034e1af13 ffff8801c4ae2f80 [ 1601.201740] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801a70d79d0 [ 1601.201751] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1601.201753] Call Trace: [ 1601.201768] [] dump_stack+0xc1/0x128 [ 1601.201780] [] warn_alloc.cold.31+0x7f/0x9c [ 1601.201790] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1601.201798] [] ? depot_save_stack+0x11c/0x470 [ 1601.201808] [] ? save_stack_trace+0x16/0x20 [ 1601.201817] [] ? xt_alloc_table_info+0x70/0x100 [ 1601.201825] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1601.201833] [] ? nf_setsockopt+0x6d/0xc0 [ 1601.201842] [] ? check_preemption_disabled+0x3b/0x200 [ 1601.201850] [] __vmalloc_node_range+0x35e/0x600 [ 1601.201858] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1601.201865] [] vmalloc+0x5b/0x70 [ 1601.201872] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1601.201880] [] xt_alloc_entry_offsets+0x41/0x60 [ 1601.201888] [] translate_table+0x215/0x1690 [ 1601.201895] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1601.201903] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1601.201911] [] ? __check_object_size+0x248/0x38e [ 1601.201919] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1601.201927] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1601.201936] [] ? mutex_unlock+0x9/0x10 [ 1601.201943] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1601.201951] [] nf_setsockopt+0x6d/0xc0 [ 1601.201960] [] ipv6_setsockopt+0xc8/0x130 [ 1601.201968] [] tcp_setsockopt+0x88/0xe0 [ 1601.201977] [] sock_common_setsockopt+0x9a/0xe0 [ 1601.201984] [] SyS_setsockopt+0x166/0x260 [ 1601.201991] [] ? SyS_recv+0x40/0x40 [ 1601.201999] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1601.202006] [] ? SyS_clock_settime+0x220/0x220 [ 1601.202014] [] ? do_syscall_64+0x48/0x550 [ 1601.202021] [] ? SyS_recv+0x40/0x40 [ 1601.202027] [] do_syscall_64+0x19f/0x550 [ 1601.202035] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1601.202039] Mem-Info: [ 1601.202060] active_anon:219703 inactive_anon:455113 isolated_anon:0 [ 1601.202060] active_file:4909 inactive_file:21470 isolated_file:0 [ 1601.202060] unevictable:0 dirty:129 writeback:0 unstable:0 [ 1601.202060] slab_reclaimable:6989 slab_unreclaimable:69590 [ 1601.202060] mapped:73229 shmem:463370 pagetables:23197 bounce:0 [ 1601.202060] free:772346 free_pcp:555 free_cma:0 [ 1601.202080] Node 0 active_anon:878812kB inactive_anon:1820452kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292916kB dirty:516kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1601.202100] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1601.202127] Normal free:74920kB min:5580kB low:9168kB high:12756kB active_anon:878740kB inactive_anon:1820452kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:516kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27956kB slab_unreclaimable:277952kB kernel_stack:31136kB pagetables:92688kB bounce:0kB free_pcp:792kB local_pcp:676kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1601.202181] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 538*4kB (UME) 430*8kB (UME) 209*16kB (UME) 144*32kB (UME) 92*64kB (UME) 147*128kB (UM) 59*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74856kB 489748 total pagecache pages [ 1601.202231] 0 pages in swap cache [ 1601.202244] Swap cache stats: add 0, delete 0, find 0/0 [ 1601.202246] Free swap = 0kB [ 1601.202248] Total swap = 0kB [ 1601.202252] 1965979 pages RAM [ 1601.202254] 0 pages HighMem/MovableOnly [ 1601.202257] 313617 pages reserved [ 1602.450493] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1602.450504] CPU: 1 PID: 16055 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1602.450523] ffff8801d777f888 ffffffff81b42e79 1ffff1003aeeff13 ffff88019a2ec740 [ 1602.450534] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801d777f9d0 [ 1602.450543] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1602.450544] Call Trace: [ 1602.450560] [] dump_stack+0xc1/0x128 [ 1602.450571] [] warn_alloc.cold.31+0x7f/0x9c [ 1602.450584] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1602.450593] [] ? depot_save_stack+0x11c/0x470 [ 1602.450600] [] ? save_stack_trace+0x16/0x20 [ 1602.450608] [] ? xt_alloc_table_info+0x70/0x100 [ 1602.450615] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1602.450625] [] ? nf_setsockopt+0x6d/0xc0 [ 1602.450636] [] ? check_preemption_disabled+0x3b/0x200 [ 1602.450644] [] __vmalloc_node_range+0x35e/0x600 [ 1602.450651] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1602.450657] [] vmalloc+0x5b/0x70 [ 1602.450663] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1602.450670] [] xt_alloc_entry_offsets+0x41/0x60 [ 1602.450676] [] translate_table+0x215/0x1690 [ 1602.450682] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1602.450689] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1602.450696] [] ? __check_object_size+0x248/0x38e [ 1602.450702] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1602.450709] [] ? compat_do_ip6t_set_ctl+0x140/0x140 07:47:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000000)={0x8, 0x100000000, [0x0, 0x6, 0x2, 0x0, 0x7f], 0x4}) tkill(r3, 0x0) 07:47:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000184e7c96126f130375e3e50a6f464900010400000000000000000e0000000000"], 0x24}}, 0x0) 07:47:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x3c) 07:47:24 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:47:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/checkreqprot\x00', 0xfffffffffffffffc, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000140)={0x9, {0x100000001, 0x4, 0xcce, 0xfffffffffffff29d, 0xfffffffffffffffd, 0x9b51}}) recvmsg(r1, &(0x7f00000007c0)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000680)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000280)=""/188, 0xbc}, {&(0x7f0000000340)=""/222, 0xde}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000580)=""/117, 0x75}, {&(0x7f0000000600)=""/107, 0x6b}], 0x7, &(0x7f0000000700)=""/188, 0xbc}, 0x40002001) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = dup3(r0, r0, 0x80000) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000080)) r3 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r3, 0x4000b) sendfile(r0, r3, 0x0, 0x802000000020011) [ 1602.450717] [] ? mutex_unlock+0x9/0x10 [ 1602.450723] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1602.450729] [] nf_setsockopt+0x6d/0xc0 [ 1602.450736] [] ipv6_setsockopt+0xc8/0x130 [ 1602.450742] [] tcp_setsockopt+0x88/0xe0 [ 1602.450749] [] sock_common_setsockopt+0x9a/0xe0 [ 1602.450756] [] SyS_setsockopt+0x166/0x260 [ 1602.450761] [] ? SyS_recv+0x40/0x40 07:47:24 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1602.450769] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1602.450776] [] ? SyS_clock_settime+0x220/0x220 07:47:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x80) pipe(&(0x7f00000007c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7fffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcd84}, 0x800000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1602.450783] [] ? do_syscall_64+0x48/0x550 [ 1602.450789] [] ? SyS_recv+0x40/0x40 [ 1602.450794] [] do_syscall_64+0x19f/0x550 [ 1602.450802] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 07:47:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) [ 1602.450806] Mem-Info: [ 1602.450827] active_anon:219745 inactive_anon:455129 isolated_anon:0 [ 1602.450827] active_file:4909 inactive_file:21470 isolated_file:0 [ 1602.450827] unevictable:0 dirty:129 writeback:0 unstable:0 [ 1602.450827] slab_reclaimable:6989 slab_unreclaimable:69604 [ 1602.450827] mapped:73238 shmem:463386 pagetables:23225 bounce:0 [ 1602.450827] free:772243 free_pcp:542 free_cma:0 [ 1602.450846] Node 0 active_anon:878980kB inactive_anon:1820516kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292952kB dirty:516kB writeback:0kB shmem:1853544kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:47:25 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1602.450865] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB 07:47:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) init_module(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r3 = open(&(0x7f00000003c0)='./file0\x00', 0x4000, 0x8) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) sendto$inet(r2, &(0x7f0000000140), 0xfffffffffffffebd, 0x3, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f00000000c0)=0x4, 0x3a2) lowmem_reserve[]: 0 3505 3505 07:47:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) fstatfs(r0, &(0x7f0000000140)=""/177) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) [ 1602.450888] Normal free:74508kB min:5580kB low:9168kB high:12756kB active_anon:878908kB inactive_anon:1820516kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:516kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27956kB slab_unreclaimable:278008kB kernel_stack:31104kB pagetables:92800kB bounce:0kB free_pcp:740kB local_pcp:692kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1602.450932] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB 07:47:26 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, 0x0, 0x0, 0x1f000000) Normal: 433*4kB (UME) 429*8kB (UME) 208*16kB (UME) 147*32kB (UME) 88*64kB (UME) 146*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74380kB 489764 total pagecache pages [ 1602.450974] 0 pages in swap cache [ 1602.450978] Swap cache stats: add 0, delete 0, find 0/0 [ 1602.450979] Free swap = 0kB [ 1602.450981] Total swap = 0kB [ 1602.450983] 1965979 pages RAM [ 1602.450985] 0 pages HighMem/MovableOnly [ 1602.450987] 313617 pages reserved [ 1603.262375] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1603.262387] CPU: 1 PID: 16067 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1603.262406] ffff88019a897888 ffffffff81b42e79 1ffff10033512f13 ffff8801319d97c0 [ 1603.262419] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019a8979d0 [ 1603.262430] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1603.262432] Call Trace: [ 1603.262449] [] dump_stack+0xc1/0x128 [ 1603.262462] [] warn_alloc.cold.31+0x7f/0x9c 07:47:26 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, 0x0, 0x0, 0x1f000000) [ 1603.262476] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1603.262488] [] ? depot_save_stack+0x11c/0x470 [ 1603.262502] [] ? save_stack_trace+0x16/0x20 [ 1603.262515] [] ? xt_alloc_table_info+0x70/0x100 [ 1603.262525] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1603.262534] [] ? nf_setsockopt+0x6d/0xc0 [ 1603.262543] [] ? check_preemption_disabled+0x3b/0x200 [ 1603.262551] [] __vmalloc_node_range+0x35e/0x600 [ 1603.262560] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1603.262567] [] vmalloc+0x5b/0x70 [ 1603.262575] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1603.262583] [] xt_alloc_entry_offsets+0x41/0x60 [ 1603.262592] [] translate_table+0x215/0x1690 [ 1603.262600] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1603.262609] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1603.262617] [] ? __check_object_size+0x248/0x38e [ 1603.262626] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1603.262635] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1603.262645] [] ? mutex_unlock+0x9/0x10 [ 1603.262653] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1603.262661] [] nf_setsockopt+0x6d/0xc0 [ 1603.262670] [] ipv6_setsockopt+0xc8/0x130 [ 1603.262678] [] tcp_setsockopt+0x88/0xe0 [ 1603.262688] [] sock_common_setsockopt+0x9a/0xe0 [ 1603.262695] [] SyS_setsockopt+0x166/0x260 [ 1603.262703] [] ? SyS_recv+0x40/0x40 [ 1603.262712] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1603.262720] [] ? SyS_clock_settime+0x220/0x220 [ 1603.262728] [] ? do_syscall_64+0x48/0x550 [ 1603.262736] [] ? SyS_recv+0x40/0x40 [ 1603.262743] [] do_syscall_64+0x19f/0x550 [ 1603.262751] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1603.262755] Mem-Info: [ 1603.262775] active_anon:219737 inactive_anon:455155 isolated_anon:0 [ 1603.262775] active_file:4909 inactive_file:21470 isolated_file:0 [ 1603.262775] unevictable:0 dirty:18 writeback:37 unstable:0 [ 1603.262775] slab_reclaimable:6989 slab_unreclaimable:69606 [ 1603.262775] mapped:73229 shmem:463412 pagetables:23235 bounce:0 [ 1603.262775] free:772245 free_pcp:515 free_cma:0 [ 1603.262790] Node 0 active_anon:878948kB inactive_anon:1820620kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292916kB dirty:72kB writeback:148kB shmem:1853648kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1603.262811] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1603.262840] Normal free:74516kB min:5580kB low:9168kB high:12756kB active_anon:878876kB inactive_anon:1820620kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:220kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27956kB slab_unreclaimable:278016kB kernel_stack:31008kB pagetables:92840kB bounce:0kB free_pcp:632kB local_pcp:504kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1603.262898] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 409*4kB (UME) 428*8kB (UME) 207*16kB (UME) 151*32kB (UME) 90*64kB (UME) 146*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74516kB 489790 total pagecache pages [ 1603.262945] 0 pages in swap cache [ 1603.262948] Swap cache stats: add 0, delete 0, find 0/0 [ 1603.262950] Free swap = 0kB [ 1603.262952] Total swap = 0kB [ 1603.262955] 1965979 pages RAM [ 1603.262957] 0 pages HighMem/MovableOnly [ 1603.262958] 313617 pages reserved [ 1603.715023] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1603.715034] CPU: 0 PID: 16067 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1603.715054] ffff88019a897888 ffffffff81b42e79 1ffff10033512f13 ffff8801319d97c0 [ 1603.715070] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019a8979d0 [ 1603.715083] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1603.715086] Call Trace: [ 1603.715105] [] dump_stack+0xc1/0x128 [ 1603.715118] [] warn_alloc.cold.31+0x7f/0x9c [ 1603.715128] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1603.715137] [] ? depot_save_stack+0x11c/0x470 [ 1603.715147] [] ? save_stack_trace+0x16/0x20 [ 1603.715157] [] ? xt_alloc_table_info+0x70/0x100 [ 1603.715166] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1603.715174] [] ? nf_setsockopt+0x6d/0xc0 [ 1603.715183] [] ? check_preemption_disabled+0x3b/0x200 [ 1603.715191] [] __vmalloc_node_range+0x35e/0x600 [ 1603.715201] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1603.715208] [] vmalloc+0x5b/0x70 [ 1603.715216] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1603.715224] [] xt_alloc_entry_offsets+0x41/0x60 [ 1603.715233] [] translate_table+0x215/0x1690 [ 1603.715241] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1603.715249] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1603.715258] [] ? __check_object_size+0x248/0x38e [ 1603.715266] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1603.715275] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1603.715285] [] ? mutex_unlock+0x9/0x10 [ 1603.715294] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1603.715301] [] nf_setsockopt+0x6d/0xc0 [ 1603.715310] [] ipv6_setsockopt+0xc8/0x130 [ 1603.715319] [] tcp_setsockopt+0x88/0xe0 [ 1603.715328] [] sock_common_setsockopt+0x9a/0xe0 [ 1603.715336] [] SyS_setsockopt+0x166/0x260 [ 1603.715344] [] ? SyS_recv+0x40/0x40 [ 1603.715353] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1603.715361] [] ? SyS_clock_settime+0x220/0x220 [ 1603.715369] [] ? task_work_run+0x14a/0x180 [ 1603.715377] [] ? do_syscall_64+0x48/0x550 [ 1603.715384] [] ? SyS_recv+0x40/0x40 [ 1603.715391] [] do_syscall_64+0x19f/0x550 [ 1603.715400] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1603.715403] Mem-Info: [ 1603.715425] active_anon:219772 inactive_anon:455117 isolated_anon:0 [ 1603.715425] active_file:4909 inactive_file:21470 isolated_file:0 [ 1603.715425] unevictable:0 dirty:39 writeback:0 unstable:0 [ 1603.715425] slab_reclaimable:6987 slab_unreclaimable:69524 [ 1603.715425] mapped:73260 shmem:463370 pagetables:23274 bounce:0 [ 1603.715425] free:772200 free_pcp:565 free_cma:0 [ 1603.715440] Node 0 active_anon:879088kB inactive_anon:1820468kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:293040kB dirty:156kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1603.715462] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1603.715501] Normal free:74336kB min:5580kB low:9168kB high:12756kB active_anon:879016kB inactive_anon:1820468kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:156kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27948kB slab_unreclaimable:277688kB kernel_stack:31104kB pagetables:92996kB bounce:0kB free_pcp:828kB local_pcp:432kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1603.715574] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 314*4kB (ME) 419*8kB (UME) 210*16kB (UME) 157*32kB (UME) 89*64kB (UME) 147*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74368kB 489748 total pagecache pages [ 1603.715634] 0 pages in swap cache [ 1603.715638] Swap cache stats: add 0, delete 0, find 0/0 [ 1603.715640] Free swap = 0kB [ 1603.715643] Total swap = 0kB [ 1603.715645] 1965979 pages RAM [ 1603.715648] 0 pages HighMem/MovableOnly [ 1603.715650] 313617 pages reserved [ 1604.564819] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1604.564832] CPU: 0 PID: 16109 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1604.564850] ffff88019c16f888 ffffffff81b42e79 1ffff1003382df13 ffff8801d8db0000 [ 1604.564864] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019c16f9d0 [ 1604.564876] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1604.564878] Call Trace: [ 1604.564892] [] dump_stack+0xc1/0x128 [ 1604.564905] [] warn_alloc.cold.31+0x7f/0x9c [ 1604.564918] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1604.564926] [] ? depot_save_stack+0x11c/0x470 [ 1604.564936] [] ? save_stack_trace+0x16/0x20 [ 1604.564944] [] ? xt_alloc_table_info+0x70/0x100 [ 1604.564957] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1604.564966] [] ? nf_setsockopt+0x6d/0xc0 [ 1604.564975] [] ? check_preemption_disabled+0x3b/0x200 [ 1604.564983] [] __vmalloc_node_range+0x35e/0x600 [ 1604.564992] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1604.564999] [] vmalloc+0x5b/0x70 [ 1604.565007] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1604.565015] [] xt_alloc_entry_offsets+0x41/0x60 [ 1604.565023] [] translate_table+0x215/0x1690 [ 1604.565031] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1604.565040] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1604.565049] [] ? __check_object_size+0x248/0x38e [ 1604.565057] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1604.565066] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1604.565075] [] ? mutex_unlock+0x9/0x10 [ 1604.565083] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1604.565090] [] nf_setsockopt+0x6d/0xc0 [ 1604.565099] [] ipv6_setsockopt+0xc8/0x130 [ 1604.565106] [] tcp_setsockopt+0x88/0xe0 [ 1604.565115] [] sock_common_setsockopt+0x9a/0xe0 [ 1604.565122] [] SyS_setsockopt+0x166/0x260 [ 1604.565129] [] ? SyS_recv+0x40/0x40 [ 1604.565138] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1604.565145] [] ? SyS_clock_settime+0x220/0x220 [ 1604.565152] [] ? do_syscall_64+0x48/0x550 [ 1604.565159] [] ? SyS_recv+0x40/0x40 [ 1604.565166] [] do_syscall_64+0x19f/0x550 07:47:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x6000000]}, 0x2c) 07:47:28 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, 0x0, 0x0, 0x1f000000) 07:47:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6, @in6=@empty}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x4, 0x580, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, &(0x7f00000000c0), &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]}, 0x60c) getrusage(0x1, &(0x7f0000000140)) r2 = dup(r1) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000980)) ftruncate(r1, 0x4000b) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000940)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0xe) sendfile(r0, r1, 0x0, 0x802000000020011) 07:47:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r4, 0xbe, 0x86}, &(0x7f00000002c0)={'enc=', 'raw', ' hash=', {'rmd320\x00'}}, &(0x7f0000000340)="fd8db9f4d8a48a629826fd1624168d8f020c438b44f67bcf334c98432f3cf83ee3cb647c7e615ad057af49b973c33802f6bd81f214df76ac2f523e0ab118f3c11fe51ce9fee61c11fd1faa167ff179a935f4fe61c6014c420005891b767da23d5dcac2583cd1db1bae33f99a1aa2efe7553d2d6a2d77b6488972d86d063bbd460565c8bb133dd2552797c8feeb3ec1592a86a528e0e51446a4d209b70d4217e871e32ae1af00ea3f024989c81a8d17cedde1d87fc36097588486f9608665", &(0x7f0000000400)="f6404d57029e7c628ede9506fb78322f22b2366ce4aae3b75d9aac6448a6737f9f4fafa359d12d957c8209ad4be9a9fef43e6d5b02805dcf6b37bde8df112056dceec951f110c200791145e780357af3bf4e50bb6d716469aac531950ef8e7eb07884dee17b5097b2f4f1c7b947873c86a08eb8a2fad484096906ceb666c2809a5669a9ac708") setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000809a4e000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3f, &(0x7f0000000000)=""/104, &(0x7f0000000140)=0x68) tkill(r3, 0x3c) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)="1edcb7fb19f38a03c3265a0c4d808a836b60c6a385a2dcc92180d06b44729376b334af68", 0x24, r4) [ 1604.565173] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1604.565177] Mem-Info: [ 1604.565195] active_anon:219765 inactive_anon:455133 isolated_anon:0 [ 1604.565195] active_file:4909 inactive_file:21470 isolated_file:0 [ 1604.565195] unevictable:0 dirty:47 writeback:0 unstable:0 [ 1604.565195] slab_reclaimable:6987 slab_unreclaimable:69617 [ 1604.565195] mapped:73247 shmem:463385 pagetables:23247 bounce:0 [ 1604.565195] free:772145 free_pcp:595 free_cma:0 07:47:28 executing program 2: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001900)={{{@in=@dev, @in6=@local, 0x4e23, 0x0, 0x4e20, 0x5, 0x0, 0x20, 0x0, 0x2b}, {0x7, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x7ff, 0x72}, {0x0, 0x3, 0x8}, 0x7fffffff, 0x0, 0x3, 0x0, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d4}, 0x6315a41cf59f386f, @in6=@mcast1, 0x3500, 0x7}}, 0xe8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000014c0)={0x0, @aes256}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000001600)={{0x2, 0x4e21, @empty}, {0x0, @random="bc72127c0d42"}, 0x8, {0x2, 0x0, @local}, 'syz_tun\x00'}) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000140)=0x367) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r3, 0x1) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) r4 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x10, 0x0) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000001440)={'security\x00'}, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000380), &(0x7f0000001400)=0xc) write$eventfd(r2, &(0x7f0000000340)=0x2, 0x8) read(r1, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) [ 1604.565209] Node 0 active_anon:879060kB inactive_anon:1820532kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292988kB dirty:188kB writeback:0kB shmem:1853540kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1604.565229] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB 07:47:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x400000000000) tkill(r3, 0x0) 07:47:28 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x0) lowmem_reserve[]: 0 3505 3505 [ 1604.565256] Normal free:74116kB min:5580kB low:9168kB high:12756kB active_anon:878988kB inactive_anon:1820532kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:188kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27948kB slab_unreclaimable:278060kB kernel_stack:31168kB pagetables:92888kB bounce:0kB free_pcp:952kB local_pcp:668kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1604.565310] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB 07:47:29 executing program 0: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14, 0x800) connect(r0, &(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f511cd4668d116000000001b004000000000ffb38e000000011f740000060000baff00000000676c966ad54f715f309d70aa38"], 0x1) renameat2(r3, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x7) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x3c) 07:47:29 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x0) Normal: 373*4kB (UME) 398*8kB (UME) 210*16kB (UME) 143*32kB (UME) 90*64kB (UME) 147*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74052kB 07:47:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) r2 = dup3(r0, r1, 0x80000) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendfile(r0, r1, 0x0, 0x802000000020011) 489763 total pagecache pages [ 1604.565360] 0 pages in swap cache ** 17 printk messages dropped ** [ 1605.337155] [] ? xt_alloc_table_info+0x70/0x100 07:47:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r0, r0, &(0x7f0000000040)=0x2, 0x100) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x3, @rand_addr, 0xfffffffffffffffc}, 0x1c) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x9, 0x3, 0xfffffffffffffffa, 0x4f5f9035}, {0x20, 0x100, 0x5, 0x9}, {0x3f, 0x4, 0x8001, 0x2}, {0x6, 0x100000001, 0x9, 0x5}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) ** 56 printk messages dropped ** [ 1605.425584] [] ? xt_alloc_table_info+0x70/0x100 [ 1605.425593] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1605.425602] [] ? nf_setsockopt+0x6d/0xc0 [ 1605.425610] [] ? check_preemption_disabled+0x3b/0x200 [ 1605.425619] [] __vmalloc_node_range+0x35e/0x600 [ 1605.425627] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1605.425635] [] vmalloc+0x5b/0x70 [ 1605.425643] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1605.425651] [] xt_alloc_entry_offsets+0x41/0x60 [ 1605.425659] [] translate_table+0x215/0x1690 [ 1605.425667] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1605.425676] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1605.425685] [] ? __check_object_size+0x248/0x38e [ 1605.425693] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1605.425702] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1605.425712] [] ? mutex_unlock+0x9/0x10 [ 1605.425720] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1605.425728] [] nf_setsockopt+0x6d/0xc0 [ 1605.425738] [] ipv6_setsockopt+0xc8/0x130 [ 1605.425745] [] tcp_setsockopt+0x88/0xe0 [ 1605.425754] [] sock_common_setsockopt+0x9a/0xe0 [ 1605.425762] [] SyS_setsockopt+0x166/0x260 [ 1605.425770] [] ? SyS_recv+0x40/0x40 [ 1605.425778] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1605.425787] [] ? SyS_clock_settime+0x220/0x220 [ 1605.425795] [] ? task_work_run+0x14a/0x180 [ 1605.425803] [] ? do_syscall_64+0x48/0x550 [ 1605.425810] [] ? SyS_recv+0x40/0x40 [ 1605.425817] [] do_syscall_64+0x19f/0x550 [ 1605.425826] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1605.425830] Mem-Info: [ 1605.425850] active_anon:219790 inactive_anon:455158 isolated_anon:0 [ 1605.425850] active_file:4909 inactive_file:21470 isolated_file:0 [ 1605.425850] unevictable:0 dirty:47 writeback:0 unstable:0 [ 1605.425850] slab_reclaimable:6987 slab_unreclaimable:69614 [ 1605.425850] mapped:73247 shmem:463410 pagetables:23247 bounce:0 [ 1605.425850] free:772175 free_pcp:589 free_cma:0 [ 1605.425866] Node 0 active_anon:879160kB inactive_anon:1820632kB active_file:19636kB inactive_file:85880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292988kB dirty:188kB writeback:0kB shmem:1853640kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1605.425886] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1605.425915] Normal free:74236kB min:5580kB low:9168kB high:12756kB active_anon:879088kB inactive_anon:1820632kB active_file:19636kB inactive_file:85868kB unevictable:0kB writepending:188kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27948kB slab_unreclaimable:278048kB kernel_stack:31040kB pagetables:92888kB bounce:0kB free_pcp:928kB local_pcp:500kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1605.425974] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 339*4kB (UME) 413*8kB (UME) 209*16kB (UME) 151*32kB (UME) 90*64kB (UME) 147*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74276kB 489788 total pagecache pages [ 1605.426027] 0 pages in swap cache [ 1605.426031] Swap cache stats: add 0, delete 0, find 0/0 [ 1605.426034] Free swap = 0kB [ 1605.426036] Total swap = 0kB [ 1605.426038] 1965979 pages RAM [ 1605.426040] 0 pages HighMem/MovableOnly [ 1605.426042] 313617 pages reserved [ 1606.490082] audit_printk_skb: 1533 callbacks suppressed [ 1606.490090] audit: type=1400 audit(1565077631.132:117378): avc: denied { sys_admin } for pid=2099 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1606.506702] audit: type=1400 audit(1565077631.142:117379): avc: denied { sys_admin } for pid=2099 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1606.512474] audit: type=1400 audit(1565077631.152:117380): avc: denied { sys_admin } for pid=2104 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1606.531202] audit: type=1400 audit(1565077631.172:117381): avc: denied { sys_admin } for pid=2099 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1606.538618] audit: type=1400 audit(1565077631.172:117382): avc: denied { sys_admin } for pid=2104 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1606.545885] audit: type=1400 audit(1565077631.182:117383): avc: denied { sys_admin } for pid=2104 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1606.572970] audit: type=1400 audit(1565077631.212:117384): avc: denied { sys_admin } for pid=2099 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1606.581112] audit: type=1400 audit(1565077631.222:117385): avc: denied { sys_admin } for pid=2104 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1606.598392] audit: type=1400 audit(1565077631.232:117386): avc: denied { dac_override } for pid=16142 comm="syz-executor.5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1606.601065] audit: type=1400 audit(1565077631.242:117387): avc: denied { dac_override } for pid=16139 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1607.728440] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1607.728450] CPU: 0 PID: 16164 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1607.728469] ffff8801934bf888 ffffffff81b42e79 1ffff10032697f13 ffff8801c3f74740 [ 1607.728486] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801934bf9d0 [ 1607.728502] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1607.728505] Call Trace: [ 1607.728523] [] dump_stack+0xc1/0x128 [ 1607.728544] [] warn_alloc.cold.31+0x7f/0x9c [ 1607.728558] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1607.728568] [] ? depot_save_stack+0x11c/0x470 [ 1607.728580] [] ? save_stack_trace+0x16/0x20 [ 1607.728589] [] ? xt_alloc_table_info+0x70/0x100 [ 1607.728598] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1607.728607] [] ? nf_setsockopt+0x6d/0xc0 [ 1607.728616] [] ? check_preemption_disabled+0x3b/0x200 [ 1607.728624] [] __vmalloc_node_range+0x35e/0x600 [ 1607.728633] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1607.728641] [] vmalloc+0x5b/0x70 [ 1607.728649] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1607.728656] [] xt_alloc_entry_offsets+0x41/0x60 [ 1607.728665] [] translate_table+0x215/0x1690 [ 1607.728673] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1607.728682] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1607.728691] [] ? __check_object_size+0x248/0x38e [ 1607.728700] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1607.728708] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1607.728718] [] ? mutex_unlock+0x9/0x10 [ 1607.728726] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1607.728734] [] nf_setsockopt+0x6d/0xc0 [ 1607.728743] [] ipv6_setsockopt+0xc8/0x130 [ 1607.728751] [] tcp_setsockopt+0x88/0xe0 [ 1607.728760] [] sock_common_setsockopt+0x9a/0xe0 [ 1607.728768] [] SyS_setsockopt+0x166/0x260 [ 1607.728776] [] ? SyS_recv+0x40/0x40 [ 1607.728785] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1607.728793] [] ? SyS_clock_settime+0x220/0x220 [ 1607.728801] [] ? do_syscall_64+0x48/0x550 [ 1607.728808] [] ? SyS_recv+0x40/0x40 [ 1607.728816] [] do_syscall_64+0x19f/0x550 [ 1607.728824] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1607.728889] Mem-Info: [ 1607.728916] active_anon:219770 inactive_anon:455142 isolated_anon:0 [ 1607.728916] active_file:4909 inactive_file:21496 isolated_file:0 [ 1607.728916] unevictable:0 dirty:76 writeback:0 unstable:0 [ 1607.728916] slab_reclaimable:6987 slab_unreclaimable:69604 [ 1607.728916] mapped:73271 shmem:463386 pagetables:23252 bounce:0 [ 1607.728916] free:772193 free_pcp:503 free_cma:0 [ 1607.728935] Node 0 active_anon:879080kB inactive_anon:1820568kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:293084kB dirty:304kB writeback:0kB shmem:1853544kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1607.728962] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1607.728997] Normal free:74308kB min:5580kB low:9168kB high:12756kB active_anon:879008kB inactive_anon:1820568kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:304kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27948kB slab_unreclaimable:278008kB kernel_stack:31136kB pagetables:92908kB bounce:0kB free_pcp:584kB local_pcp:320kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1607.729062] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 377*4kB (UME) 397*8kB (UME) 207*16kB (UME) 152*32kB (UME) 90*64kB (UME) 147*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74300kB 489790 total pagecache pages [ 1607.729116] 0 pages in swap cache [ 1607.729120] Swap cache stats: add 0, delete 0, find 0/0 [ 1607.729122] Free swap = 0kB [ 1607.729125] Total swap = 0kB [ 1607.729127] 1965979 pages RAM [ 1607.729129] 0 pages HighMem/MovableOnly [ 1607.729131] 313617 pages reserved [ 1610.045446] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1610.045458] CPU: 1 PID: 16208 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1610.045475] ffff8801d7e47888 ffffffff81b42e79 1ffff1003afc8f13 ffff8801d94b97c0 [ 1610.045488] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801d7e479d0 [ 1610.045501] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1610.045505] Call Trace: [ 1610.045523] [] dump_stack+0xc1/0x128 [ 1610.045542] [] warn_alloc.cold.31+0x7f/0x9c [ 1610.045555] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1610.045566] [] ? depot_save_stack+0x11c/0x470 [ 1610.045579] [] ? save_stack_trace+0x16/0x20 [ 1610.045592] [] ? xt_alloc_table_info+0x70/0x100 [ 1610.045602] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1610.045610] [] ? nf_setsockopt+0x6d/0xc0 [ 1610.045619] [] ? check_preemption_disabled+0x3b/0x200 [ 1610.045628] [] __vmalloc_node_range+0x35e/0x600 [ 1610.045636] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1610.045644] [] vmalloc+0x5b/0x70 [ 1610.045652] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1610.045659] [] xt_alloc_entry_offsets+0x41/0x60 [ 1610.045666] [] translate_table+0x215/0x1690 [ 1610.045673] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1610.045681] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1610.045689] [] ? __check_object_size+0x248/0x38e [ 1610.045696] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1610.045704] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1610.045711] [] ? mutex_unlock+0x9/0x10 [ 1610.045718] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1610.045725] [] nf_setsockopt+0x6d/0xc0 [ 1610.045733] [] ipv6_setsockopt+0xc8/0x130 [ 1610.045740] [] tcp_setsockopt+0x88/0xe0 [ 1610.045747] [] sock_common_setsockopt+0x9a/0xe0 [ 1610.045754] [] SyS_setsockopt+0x166/0x260 [ 1610.045760] [] ? SyS_recv+0x40/0x40 [ 1610.045767] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1610.045775] [] ? SyS_clock_settime+0x220/0x220 [ 1610.045781] [] ? do_syscall_64+0x48/0x550 [ 1610.045788] [] ? SyS_recv+0x40/0x40 [ 1610.045794] [] do_syscall_64+0x19f/0x550 [ 1610.045801] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1610.045804] Mem-Info: [ 1610.045825] active_anon:219713 inactive_anon:455140 isolated_anon:0 [ 1610.045825] active_file:4909 inactive_file:21496 isolated_file:0 [ 1610.045825] unevictable:0 dirty:58 writeback:0 unstable:0 [ 1610.045825] slab_reclaimable:6987 slab_unreclaimable:69616 [ 1610.045825] mapped:73213 shmem:463370 pagetables:23236 bounce:0 [ 1610.045825] free:772258 free_pcp:528 free_cma:0 [ 1610.045839] Node 0 active_anon:878852kB inactive_anon:1820560kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292852kB dirty:232kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:47:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1610.045855] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1610.045879] Normal free:74568kB min:5580kB low:9168kB high:12756kB active_anon:878780kB inactive_anon:1820560kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:232kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27948kB slab_unreclaimable:278056kB kernel_stack:31040kB pagetables:92844kB bounce:0kB free_pcp:684kB local_pcp:428kB free_cma:0kB lowmem_reserve[]: 0 0 0 07:47:31 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab56ad8e3980900b61a0bf7a301ffe8d302ab2156da58a5d1ab066f24351eda628769d37cbcb5c0c5da5de4360f362412f106545c8ded11ec96966d5b6b0", @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872b0001000000000000f515586de3c101e4f8d1b12b1894ef983d0cfcdfbb1118c5ae060bb6ae2af877735be7b03b5278b53fe125393d6b6adf7f7d0734bc1e5566b4d1447a982f0b0b061ef0"], 0x0, 0x140}, 0x20) tkill(r0, 0x80000000000003b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ptrace$cont(0x7, r0, 0x0, 0x0) 07:47:31 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x0) 07:47:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_POLL(r2, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x5, {0x10000}}, 0x18) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) 07:47:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) pipe(&(0x7f0000000000)) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) 07:47:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) fsetxattr(r1, &(0x7f0000000080)=@random={'security.', '\x00'}, &(0x7f00000000c0)='\x00', 0x1, 0x2) [ 1610.045936] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 430*4kB (UME) 407*8kB (UME) 217*16kB (UME) 143*32kB (UME) 91*64kB (UME) 147*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74528kB 489774 total pagecache pages [ 1610.045979] 0 pages in swap cache 07:47:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', r3}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x7) tkill(r4, 0x0) 07:47:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/128, 0x80}, {0x0}, {0x0}], 0x3}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x479327b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, &(0x7f0000000040)) recvfrom$inet(r2, 0x0, 0x530e, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) [ 1610.045983] Swap cache stats: add 0, delete 0, find 0/0 [ 1610.045985] Free swap = 0kB [ 1610.045987] Total swap = 0kB 07:47:32 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x0) [ 1610.045989] 1965979 pages RAM [ 1610.045991] 0 pages HighMem/MovableOnly [ 1610.045993] 313617 pages reserved [ 1610.074317] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1610.074327] CPU: 1 PID: 16214 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1610.074345] ffff8801c2b97888 ffffffff81b42e79 1ffff10038572f13 ffff8801d5148000 [ 1610.074358] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801c2b979d0 [ 1610.074372] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1610.074374] Call Trace: [ 1610.074392] [] dump_stack+0xc1/0x128 [ 1610.074402] [] warn_alloc.cold.31+0x7f/0x9c [ 1610.074411] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1610.074418] [] ? depot_save_stack+0x11c/0x470 [ 1610.074427] [] ? save_stack_trace+0x16/0x20 07:47:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x4e20, @broadcast}}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) 07:47:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000140)=""/111) connect$inet6(r1, &(0x7f0000000080), 0x1c) r3 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@remote}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x1010, r3, 0x21) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff00000000000000400db0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x7fffffff}}, @fwd={0x6}]}, {0x0, [0x2e, 0x7f, 0x2e, 0x30]}}, &(0x7f0000000240)=""/51, 0x42, 0x33}, 0x20) tkill(r4, 0x0) ** 35 printk messages dropped ** [ 1610.074826] lowmem_reserve[]: 0 0 0 ** 20 printk messages dropped ** [ 1610.501514] [] ? save_stack_trace+0x16/0x20 07:47:32 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1610.501525] [] ? xt_alloc_table_info+0x70/0x100 [ 1610.501536] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1610.501546] [] ? nf_setsockopt+0x6d/0xc0 [ 1610.501555] [] ? check_preemption_disabled+0x3b/0x200 [ 1610.501563] [] __vmalloc_node_range+0x35e/0x600 [ 1610.501571] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1610.501578] [] vmalloc+0x5b/0x70 [ 1610.501586] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1610.501594] [] xt_alloc_entry_offsets+0x41/0x60 [ 1610.501602] [] translate_table+0x215/0x1690 [ 1610.501610] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1610.501619] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1610.501627] [] ? __check_object_size+0x248/0x38e [ 1610.501635] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1610.501643] [] ? compat_do_ip6t_set_ctl+0x140/0x140 ** 40 printk messages dropped ** [ 1610.548639] [] ? depot_save_stack+0x11c/0x470 [ 1610.548650] [] ? save_stack_trace+0x16/0x20 [ 1610.548659] [] ? xt_alloc_table_info+0x70/0x100 [ 1610.548669] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1610.548678] [] ? nf_setsockopt+0x6d/0xc0 [ 1610.548686] [] ? check_preemption_disabled+0x3b/0x200 [ 1610.548695] [] __vmalloc_node_range+0x35e/0x600 [ 1610.548704] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1610.548711] [] vmalloc+0x5b/0x70 [ 1610.548719] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1610.548727] [] xt_alloc_entry_offsets+0x41/0x60 [ 1610.548735] [] translate_table+0x215/0x1690 [ 1610.548743] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1610.548752] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1610.548761] [] ? __check_object_size+0x248/0x38e ** 43 printk messages dropped ** [ 1610.755534] [] ? save_stack_trace+0x16/0x20 [ 1610.755542] [] ? xt_alloc_table_info+0x70/0x100 [ 1610.755553] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1610.755564] [] ? nf_setsockopt+0x6d/0xc0 [ 1610.755576] [] ? check_preemption_disabled+0x3b/0x200 [ 1610.755584] [] __vmalloc_node_range+0x35e/0x600 [ 1610.755592] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1610.755600] [] vmalloc+0x5b/0x70 [ 1610.755607] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1610.755615] [] xt_alloc_entry_offsets+0x41/0x60 [ 1610.755624] [] translate_table+0x215/0x1690 [ 1610.755632] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1610.755641] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1610.755650] [] ? __check_object_size+0x248/0x38e [ 1610.755658] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1610.755667] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1610.755677] [] ? mutex_unlock+0x9/0x10 [ 1610.755685] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1610.755693] [] nf_setsockopt+0x6d/0xc0 [ 1610.755703] [] ipv6_setsockopt+0xc8/0x130 [ 1610.755711] [] tcp_setsockopt+0x88/0xe0 [ 1610.755719] [] sock_common_setsockopt+0x9a/0xe0 [ 1610.755727] [] SyS_setsockopt+0x166/0x260 [ 1610.755735] [] ? SyS_recv+0x40/0x40 [ 1610.755744] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1610.755752] [] ? SyS_clock_settime+0x220/0x220 [ 1610.755767] [] ? do_syscall_64+0x48/0x550 [ 1610.755774] [] ? SyS_recv+0x40/0x40 [ 1610.755781] [] do_syscall_64+0x19f/0x550 [ 1610.755790] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1610.804663] Mem-Info: [ 1610.804735] active_anon:219739 inactive_anon:455153 isolated_anon:0 [ 1610.804735] active_file:4909 inactive_file:21496 isolated_file:0 [ 1610.804735] unevictable:0 dirty:66 writeback:0 unstable:0 [ 1610.804735] slab_reclaimable:6987 slab_unreclaimable:69504 [ 1610.804735] mapped:73259 shmem:463387 pagetables:23267 bounce:0 [ 1610.804735] free:772204 free_pcp:669 free_cma:0 [ 1610.804759] Node 0 active_anon:878956kB inactive_anon:1820612kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:293036kB dirty:264kB writeback:0kB shmem:1853548kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1610.804781] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1610.804810] Normal free:74352kB min:5580kB low:9168kB high:12756kB active_anon:878884kB inactive_anon:1820612kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:264kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27948kB slab_unreclaimable:277608kB kernel_stack:31040kB pagetables:92968kB bounce:0kB free_pcp:1248kB local_pcp:560kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1610.804863] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 342*4kB (UME) 417*8kB (UME) 229*16kB (UME) 144*32kB (UME) 90*64kB (UME) 147*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74416kB 489791 total pagecache pages [ 1610.804914] 0 pages in swap cache [ 1610.804919] Swap cache stats: add 0, delete 0, find 0/0 [ 1610.804921] Free swap = 0kB [ 1610.804923] Total swap = 0kB [ 1610.804926] 1965979 pages RAM [ 1610.804928] 0 pages HighMem/MovableOnly [ 1610.804930] 313617 pages reserved [ 1610.824697] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1610.824707] CPU: 1 PID: 16238 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1610.824725] ffff8801cd27f888 ffffffff81b42e79 1ffff10039a4ff13 ffff8801aa1b2f80 [ 1610.824738] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801cd27f9d0 [ 1610.824751] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1610.824753] Call Trace: [ 1610.824770] [] dump_stack+0xc1/0x128 [ 1610.824782] [] warn_alloc.cold.31+0x7f/0x9c [ 1610.824796] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1610.824804] [] ? depot_save_stack+0x11c/0x470 [ 1610.824814] [] ? save_stack_trace+0x16/0x20 [ 1610.824823] [] ? xt_alloc_table_info+0x70/0x100 [ 1610.824833] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1610.824845] [] ? nf_setsockopt+0x6d/0xc0 [ 1610.824854] [] ? check_preemption_disabled+0x3b/0x200 [ 1610.824862] [] __vmalloc_node_range+0x35e/0x600 [ 1610.824871] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1610.824879] [] vmalloc+0x5b/0x70 [ 1610.824887] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1610.824894] [] xt_alloc_entry_offsets+0x41/0x60 [ 1610.824903] [] translate_table+0x215/0x1690 [ 1610.824911] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1610.824921] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1610.824929] [] ? __check_object_size+0x248/0x38e [ 1610.824938] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1610.824947] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1610.824957] [] ? mutex_unlock+0x9/0x10 [ 1610.824966] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1610.824973] [] nf_setsockopt+0x6d/0xc0 [ 1610.824982] [] ipv6_setsockopt+0xc8/0x130 [ 1610.824990] [] tcp_setsockopt+0x88/0xe0 [ 1610.824998] [] sock_common_setsockopt+0x9a/0xe0 [ 1610.825007] [] SyS_setsockopt+0x166/0x260 [ 1610.825014] [] ? SyS_recv+0x40/0x40 [ 1610.825023] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1610.825031] [] ? SyS_clock_settime+0x220/0x220 [ 1610.825040] [] ? task_work_run+0x14a/0x180 [ 1610.825048] [] ? do_syscall_64+0x48/0x550 [ 1610.825055] [] ? SyS_recv+0x40/0x40 [ 1610.825062] [] do_syscall_64+0x19f/0x550 [ 1610.825071] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1610.825075] Mem-Info: [ 1610.825095] active_anon:219739 inactive_anon:455153 isolated_anon:0 [ 1610.825095] active_file:4909 inactive_file:21496 isolated_file:0 [ 1610.825095] unevictable:0 dirty:66 writeback:0 unstable:0 [ 1610.825095] slab_reclaimable:6987 slab_unreclaimable:69531 [ 1610.825095] mapped:73259 shmem:463387 pagetables:23267 bounce:0 [ 1610.825095] free:772204 free_pcp:660 free_cma:0 [ 1610.825115] Node 0 active_anon:878956kB inactive_anon:1820612kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:293036kB dirty:264kB writeback:0kB shmem:1853548kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1610.825138] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1610.825169] Normal free:74352kB min:5580kB low:9168kB high:12756kB active_anon:878884kB inactive_anon:1820612kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:264kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27948kB slab_unreclaimable:277716kB kernel_stack:31040kB pagetables:92968kB bounce:0kB free_pcp:1212kB local_pcp:544kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1610.825228] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 342*4kB (UME) 417*8kB (UME) 229*16kB (UME) 142*32kB (UME) 90*64kB (UME) 147*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74352kB 489791 total pagecache pages [ 1610.825281] 0 pages in swap cache [ 1610.825286] Swap cache stats: add 0, delete 0, find 0/0 [ 1610.825288] Free swap = 0kB [ 1610.825290] Total swap = 0kB [ 1610.825292] 1965979 pages RAM [ 1610.825294] 0 pages HighMem/MovableOnly [ 1610.825297] 313617 pages reserved [ 1611.389869] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1611.389880] CPU: 0 PID: 16250 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1611.389899] ffff88018b677888 ffffffff81b42e79 1ffff100316cef13 ffff8801d7815f00 [ 1611.389912] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88018b6779d0 [ 1611.389933] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1611.389935] Call Trace: [ 1611.389955] [] dump_stack+0xc1/0x128 [ 1611.389968] [] warn_alloc.cold.31+0x7f/0x9c [ 1611.389982] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1611.389993] [] ? depot_save_stack+0x11c/0x470 [ 1611.390007] [] ? save_stack_trace+0x16/0x20 [ 1611.390015] [] ? xt_alloc_table_info+0x70/0x100 [ 1611.390026] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1611.390039] [] ? nf_setsockopt+0x6d/0xc0 [ 1611.390048] [] ? check_preemption_disabled+0x3b/0x200 [ 1611.390057] [] __vmalloc_node_range+0x35e/0x600 [ 1611.390066] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1611.390074] [] vmalloc+0x5b/0x70 [ 1611.390082] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1611.390090] [] xt_alloc_entry_offsets+0x41/0x60 [ 1611.390099] [] translate_table+0x215/0x1690 [ 1611.390107] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1611.390116] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1611.390125] [] ? __check_object_size+0x248/0x38e [ 1611.390134] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1611.390143] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1611.390153] [] ? mutex_unlock+0x9/0x10 [ 1611.390162] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1611.390169] [] nf_setsockopt+0x6d/0xc0 [ 1611.390179] [] ipv6_setsockopt+0xc8/0x130 [ 1611.390187] [] tcp_setsockopt+0x88/0xe0 [ 1611.390196] [] sock_common_setsockopt+0x9a/0xe0 [ 1611.390204] [] SyS_setsockopt+0x166/0x260 [ 1611.390212] [] ? SyS_recv+0x40/0x40 [ 1611.390221] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1611.390229] [] ? SyS_clock_settime+0x220/0x220 [ 1611.390237] [] ? do_syscall_64+0x48/0x550 [ 1611.390243] [] ? SyS_recv+0x40/0x40 [ 1611.390251] [] do_syscall_64+0x19f/0x550 [ 1611.390259] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1611.390263] Mem-Info: [ 1611.390283] active_anon:219739 inactive_anon:455153 isolated_anon:0 [ 1611.390283] active_file:4909 inactive_file:21496 isolated_file:0 [ 1611.390283] unevictable:0 dirty:66 writeback:0 unstable:0 [ 1611.390283] slab_reclaimable:6987 slab_unreclaimable:69410 [ 1611.390283] mapped:73234 shmem:463387 pagetables:23267 bounce:0 [ 1611.390283] free:772356 free_pcp:593 free_cma:0 [ 1611.390299] Node 0 active_anon:878956kB inactive_anon:1820612kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292936kB dirty:264kB writeback:0kB shmem:1853548kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1611.390320] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1611.390349] Normal free:74960kB min:5580kB low:9168kB high:12756kB active_anon:878884kB inactive_anon:1820612kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:264kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27948kB slab_unreclaimable:277232kB kernel_stack:31072kB pagetables:92968kB bounce:0kB free_pcp:944kB local_pcp:380kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1611.407828] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 448*4kB (UME) 422*8kB (UME) 239*16kB (UME) 149*32kB (UME) 84*64kB (UME) 147*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74816kB 489791 total pagecache pages [ 1611.407891] 0 pages in swap cache [ 1611.407896] Swap cache stats: add 0, delete 0, find 0/0 [ 1611.407898] Free swap = 0kB [ 1611.407900] Total swap = 0kB [ 1611.407903] 1965979 pages RAM [ 1611.407905] 0 pages HighMem/MovableOnly [ 1611.407908] 313617 pages reserved [ 1611.439548] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1611.439556] CPU: 0 PID: 16251 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1611.439570] ffff88018cad7888 ffffffff81b42e79 1ffff1003195af13 ffff8801cf6b2f80 [ 1611.439580] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88018cad79d0 [ 1611.439590] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1611.439592] Call Trace: [ 1611.439608] [] dump_stack+0xc1/0x128 [ 1611.439618] [] warn_alloc.cold.31+0x7f/0x9c [ 1611.439628] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1611.439636] [] ? depot_save_stack+0x11c/0x470 [ 1611.439646] [] ? save_stack_trace+0x16/0x20 [ 1611.439655] [] ? xt_alloc_table_info+0x70/0x100 [ 1611.439663] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1611.439671] [] ? nf_setsockopt+0x6d/0xc0 [ 1611.439680] [] ? check_preemption_disabled+0x3b/0x200 [ 1611.439688] [] __vmalloc_node_range+0x35e/0x600 [ 1611.439696] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1611.439703] [] vmalloc+0x5b/0x70 [ 1611.439710] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1611.439716] [] xt_alloc_entry_offsets+0x41/0x60 [ 1611.439723] [] translate_table+0x215/0x1690 [ 1611.439728] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1611.439736] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1611.439742] [] ? __check_object_size+0x248/0x38e [ 1611.439749] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1611.439756] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1611.439765] [] ? mutex_unlock+0x9/0x10 [ 1611.439771] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1611.439776] [] nf_setsockopt+0x6d/0xc0 [ 1611.439784] [] ipv6_setsockopt+0xc8/0x130 [ 1611.439791] [] tcp_setsockopt+0x88/0xe0 [ 1611.439799] [] sock_common_setsockopt+0x9a/0xe0 [ 1611.439806] [] SyS_setsockopt+0x166/0x260 [ 1611.439812] [] ? SyS_recv+0x40/0x40 [ 1611.439820] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1611.439825] [] ? SyS_clock_settime+0x220/0x220 [ 1611.439831] [] ? do_syscall_64+0x48/0x550 [ 1611.439837] [] ? SyS_recv+0x40/0x40 [ 1611.439843] [] do_syscall_64+0x19f/0x550 [ 1611.439850] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1611.439853] Mem-Info: [ 1611.439870] active_anon:219739 inactive_anon:455153 isolated_anon:0 [ 1611.439870] active_file:4909 inactive_file:21496 isolated_file:0 [ 1611.439870] unevictable:0 dirty:66 writeback:0 unstable:0 [ 1611.439870] slab_reclaimable:6987 slab_unreclaimable:69437 [ 1611.439870] mapped:73234 shmem:463387 pagetables:23267 bounce:0 [ 1611.439870] free:772324 free_pcp:570 free_cma:0 [ 1611.439882] Node 0 active_anon:878956kB inactive_anon:1820612kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292936kB dirty:264kB writeback:0kB shmem:1853548kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1611.439898] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1611.439926] Normal free:74832kB min:5580kB low:9168kB high:12756kB active_anon:878884kB inactive_anon:1820612kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:264kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27948kB slab_unreclaimable:277340kB kernel_stack:31104kB pagetables:92968kB bounce:0kB free_pcp:852kB local_pcp:352kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1611.439969] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 448*4kB (UME) 422*8kB (UME) 239*16kB (UME) 147*32kB (UME) 84*64kB (UME) 147*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74752kB 07:47:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x37) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) ftruncate(r1, 0x4000b) socket$inet(0x2, 0x800, 0x1000) sendfile(r0, r1, 0x0, 0x802000000020011) 07:47:35 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x44002, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x80800) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@mcast2, 0x2f, r1}) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') preadv(r2, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:47:35 executing program 5: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/context\x00', 0x2, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x900, 0x0) write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0x1f, 0x1ff, 0x1, r0}}}, 0x28) ptrace$cont(0x1f, r0, 0x0, 0x0) 489791 total pagecache pages [ 1611.440009] 0 pages in swap cache [ 1611.440012] Swap cache stats: add 0, delete 0, find 0/0 [ 1611.440014] Free swap = 0kB [ 1611.440016] Total swap = 0kB [ 1611.440018] 1965979 pages RAM [ 1611.440019] 0 pages HighMem/MovableOnly [ 1611.440021] 313617 pages reserved [ 1612.102102] audit_printk_skb: 1731 callbacks suppressed [ 1612.102118] audit: type=1400 audit(1565077636.742:117965): avc: denied { net_raw } for pid=16246 comm="syz-executor.1" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:47:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6}}, 0xe8) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2080) ioctl$KDADDIO(r4, 0x4b34, 0x7) dup3(r3, r1, 0x0) [ 1612.175615] audit: type=1400 audit(1565077636.812:117966): avc: denied { sys_admin } for pid=2100 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1612.177343] audit: type=1400 audit(1565077636.812:117967): avc: denied { sys_admin } for pid=2100 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1612.182454] audit: type=1400 audit(1565077636.822:117968): avc: denied { sys_admin } for pid=2100 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:47:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) connect$inet6(r1, &(0x7f0000000080), 0x1c) r3 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x3c) 07:47:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="6166676c65a19356cbbc00005607f511000000000065498832e511490012af3a8f000000000000400000000004b38e000000000000000000a300000000001f000000060000bab079c1d667d9a1174fd93828020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e7006d266d2ebd9359ca8e63f2967a5fe05b78ee"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) [ 1612.187500] audit: type=1400 audit(1565077636.822:117969): avc: denied { sys_admin } for pid=2100 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:47:36 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400000, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = syz_open_pts(0xffffffffffffffff, 0x82) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) mknod(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x101) ftruncate(r3, 0x3) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800001, 0x4000000000000011, r4, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)) [ 1612.204327] audit: type=1400 audit(1565077636.842:117970): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:47:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000e) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0xffffffffffffffff, 0x9) sendfile(r0, r1, 0x0, 0x802000000020011) [ 1612.206088] audit: type=1400 audit(1565077636.842:117971): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1612.208099] audit: type=1400 audit(1565077636.842:117972): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:47:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:36 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)=':]vboxnet0^[\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 1612.230660] audit: type=1400 audit(1565077636.852:117973): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1612.235013] audit: type=1400 audit(1565077636.872:117974): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:47:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) socketpair(0xa, 0x2, 0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"/620, @ANYRES32=r3], 0x270}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) [ 1613.643632] syz-executor.2 (16264) used greatest stack depth: 22248 bytes left [ 1614.029486] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1614.029499] CPU: 0 PID: 16269 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1614.029518] ffff8801cc567888 ffffffff81b42e79 1ffff100398acf13 ffff88019ce78000 [ 1614.029531] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801cc5679d0 07:47:37 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) getsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1614.029545] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1614.029547] Call Trace: [ 1614.029564] [] dump_stack+0xc1/0x128 [ 1614.029574] [] warn_alloc.cold.31+0x7f/0x9c [ 1614.029585] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1614.029596] [] ? depot_save_stack+0x11c/0x470 [ 1614.029609] [] ? save_stack_trace+0x16/0x20 [ 1614.029618] [] ? xt_alloc_table_info+0x70/0x100 [ 1614.029627] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1614.029636] [] ? nf_setsockopt+0x6d/0xc0 [ 1614.029645] [] ? check_preemption_disabled+0x3b/0x200 07:47:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x80000000, 0x10000, @local}, 0x3fa) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c65000056070000100004b38e000000000000000000a300000000001f000000060000ba02ca1f800000000d00000080ffffffff000000000000004000b0efa864f494f31700"/86], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) [ 1614.029654] [] __vmalloc_node_range+0x35e/0x600 [ 1614.029663] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1614.029670] [] vmalloc+0x5b/0x70 [ 1614.029678] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1614.029686] [] xt_alloc_entry_offsets+0x41/0x60 [ 1614.029695] [] translate_table+0x215/0x1690 [ 1614.029703] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1614.029712] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1614.029730] [] ? __check_object_size+0x248/0x38e [ 1614.029741] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1614.029754] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1614.029766] [] ? mutex_unlock+0x9/0x10 07:47:38 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000040)) preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:47:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1614.029776] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1614.029787] [] nf_setsockopt+0x6d/0xc0 07:47:38 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x80, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in=@multicast1, 0x4e24, 0x81, 0x4e20, 0xf9a, 0x2, 0x20, 0x80, 0x2e, r1, r2}, {0x0, 0x3, 0x6, 0x100000001, 0x3, 0x1, 0x4, 0x8}, {0x80, 0x9, 0x302, 0x5}, 0x15, 0x6e6bb7, 0x3, 0x0, 0x1, 0x3}, {{@in=@multicast2, 0x4d3, 0x3f}, 0xa, @in=@loopback, 0x3506, 0x0, 0x1, 0x5, 0x10001, 0xffffffffffffff78, 0x4}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7e}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 07:47:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x7ff) sendfile(r0, r1, 0x0, 0x802000000020011) [ 1614.029799] [] ipv6_setsockopt+0xc8/0x130 [ 1614.029810] [] tcp_setsockopt+0x88/0xe0 [ 1614.029820] [] sock_common_setsockopt+0x9a/0xe0 [ 1614.029831] [] SyS_setsockopt+0x166/0x260 [ 1614.029839] [] ? SyS_recv+0x40/0x40 [ 1614.029848] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1614.029856] [] ? SyS_clock_settime+0x220/0x220 [ 1614.029864] [] ? do_syscall_64+0x48/0x550 [ 1614.029871] [] ? SyS_recv+0x40/0x40 [ 1614.029877] [] do_syscall_64+0x19f/0x550 [ 1614.029886] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1614.029889] Mem-Info: [ 1614.029912] active_anon:219771 inactive_anon:455222 isolated_anon:0 [ 1614.029912] active_file:4909 inactive_file:21496 isolated_file:0 [ 1614.029912] unevictable:0 dirty:63 writeback:0 unstable:0 [ 1614.029912] slab_reclaimable:6987 slab_unreclaimable:69547 [ 1614.029912] mapped:73213 shmem:463395 pagetables:23299 bounce:0 [ 1614.029912] free:772220 free_pcp:445 free_cma:0 [ 1614.029930] Node 0 active_anon:879084kB inactive_anon:1820888kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292852kB dirty:252kB writeback:0kB shmem:1853580kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1614.029951] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1614.029980] Normal free:74416kB min:5580kB low:9168kB high:12756kB active_anon:879012kB inactive_anon:1820888kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:252kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27948kB slab_unreclaimable:277780kB kernel_stack:31168kB pagetables:93096kB bounce:0kB free_pcp:352kB local_pcp:192kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1614.030081] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 394*4kB (UME) 432*8kB (UME) 245*16kB (UME) 138*32kB (ME) 82*64kB (UME) 147*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 74296kB 489799 total pagecache pages [ 1614.030150] 0 pages in swap cache [ 1614.030156] Swap cache stats: add 0, delete 0, find 0/0 [ 1614.030159] Free swap = 0kB [ 1614.030162] Total swap = 0kB [ 1614.030164] 1965979 pages RAM [ 1614.030167] 0 pages HighMem/MovableOnly [ 1614.030171] 313617 pages reserved [ 1615.287430] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1615.287441] CPU: 1 PID: 16305 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1615.287461] ffff8801d2f4f888 ffffffff81b42e79 1ffff1003a5e9f13 ffff8801c5ffdf00 [ 1615.287475] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801d2f4f9d0 [ 1615.287489] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1615.287491] Call Trace: [ 1615.287508] [] dump_stack+0xc1/0x128 [ 1615.287524] [] warn_alloc.cold.31+0x7f/0x9c [ 1615.287536] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1615.287544] [] ? depot_save_stack+0x11c/0x470 [ 1615.287554] [] ? save_stack_trace+0x16/0x20 [ 1615.287563] [] ? xt_alloc_table_info+0x70/0x100 [ 1615.287572] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1615.287581] [] ? nf_setsockopt+0x6d/0xc0 [ 1615.287590] [] ? check_preemption_disabled+0x3b/0x200 [ 1615.287599] [] __vmalloc_node_range+0x35e/0x600 [ 1615.287607] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1615.287615] [] vmalloc+0x5b/0x70 [ 1615.287622] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1615.287630] [] xt_alloc_entry_offsets+0x41/0x60 [ 1615.287638] [] translate_table+0x215/0x1690 [ 1615.287646] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1615.287656] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1615.287665] [] ? __check_object_size+0x248/0x38e [ 1615.287674] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1615.287683] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1615.287692] [] ? mutex_unlock+0x9/0x10 [ 1615.287701] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1615.287709] [] nf_setsockopt+0x6d/0xc0 [ 1615.287718] [] ipv6_setsockopt+0xc8/0x130 [ 1615.287726] [] tcp_setsockopt+0x88/0xe0 [ 1615.287736] [] sock_common_setsockopt+0x9a/0xe0 [ 1615.287744] [] SyS_setsockopt+0x166/0x260 [ 1615.287751] [] ? SyS_recv+0x40/0x40 [ 1615.287760] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1615.287769] [] ? SyS_clock_settime+0x220/0x220 [ 1615.287776] [] ? do_syscall_64+0x48/0x550 [ 1615.287784] [] ? SyS_recv+0x40/0x40 [ 1615.287791] [] do_syscall_64+0x19f/0x550 [ 1615.287800] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1615.287803] Mem-Info: [ 1615.287824] active_anon:219774 inactive_anon:455212 isolated_anon:0 [ 1615.287824] active_file:4909 inactive_file:21496 isolated_file:0 [ 1615.287824] unevictable:0 dirty:63 writeback:0 unstable:0 [ 1615.287824] slab_reclaimable:6987 slab_unreclaimable:69786 [ 1615.287824] mapped:73238 shmem:463370 pagetables:23253 bounce:0 [ 1615.287824] free:771911 free_pcp:502 free_cma:0 [ 1615.287843] Node 0 active_anon:879096kB inactive_anon:1820848kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292952kB dirty:252kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1615.287867] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1615.287891] Normal free:73180kB min:5580kB low:9168kB high:12756kB active_anon:879024kB inactive_anon:1820848kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:252kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27948kB slab_unreclaimable:278736kB kernel_stack:31104kB pagetables:92912kB bounce:0kB free_pcp:580kB local_pcp:372kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1615.287938] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 295*4kB (UME) 432*8kB (UME) 244*16kB (UME) 139*32kB (UME) 70*64kB (UME) 147*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 73148kB 489774 total pagecache pages [ 1615.287987] 0 pages in swap cache [ 1615.287991] Swap cache stats: add 0, delete 0, find 0/0 [ 1615.287994] Free swap = 0kB [ 1615.287996] Total swap = 0kB [ 1615.287998] 1965979 pages RAM [ 1615.288001] 0 pages HighMem/MovableOnly [ 1615.288003] 313617 pages reserved [ 1617.128349] audit_printk_skb: 1287 callbacks suppressed [ 1617.128359] audit: type=1400 audit(1565077641.762:118405): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1617.132136] audit: type=1400 audit(1565077641.772:118406): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1617.134804] audit: type=1400 audit(1565077641.732:118402): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1617.136670] audit: type=1400 audit(1565077641.772:118407): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1617.139389] audit: type=1400 audit(1565077641.782:118408): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1617.140982] audit: type=1400 audit(1565077641.782:118409): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1617.141231] audit: type=1400 audit(1565077641.782:118410): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1617.143112] audit: type=1400 audit(1565077641.782:118411): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1617.144892] audit: type=1400 audit(1565077641.782:118412): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1617.146759] audit: type=1400 audit(1565077641.782:118414): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1617.669708] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1617.669719] CPU: 1 PID: 16353 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1617.669736] ffff8801d3fdf888 ffffffff81b42e79 1ffff1003a7fbf13 ffff8801a86b4740 [ 1617.669749] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801d3fdf9d0 [ 1617.669761] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1617.669764] Call Trace: [ 1617.669781] [] dump_stack+0xc1/0x128 [ 1617.669794] [] warn_alloc.cold.31+0x7f/0x9c [ 1617.669807] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1617.669819] [] ? depot_save_stack+0x11c/0x470 [ 1617.669832] [] ? save_stack_trace+0x16/0x20 [ 1617.669842] [] ? xt_alloc_table_info+0x70/0x100 [ 1617.669850] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1617.669859] [] ? nf_setsockopt+0x6d/0xc0 [ 1617.669867] [] ? check_preemption_disabled+0x3b/0x200 [ 1617.669875] [] __vmalloc_node_range+0x35e/0x600 [ 1617.669884] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1617.669891] [] vmalloc+0x5b/0x70 [ 1617.669898] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1617.669905] [] xt_alloc_entry_offsets+0x41/0x60 [ 1617.669914] [] translate_table+0x215/0x1690 [ 1617.669922] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1617.669939] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1617.669949] [] ? __check_object_size+0x248/0x38e [ 1617.669959] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1617.669970] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1617.669983] [] ? mutex_unlock+0x9/0x10 [ 1617.669994] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1617.670002] [] nf_setsockopt+0x6d/0xc0 [ 1617.670011] [] ipv6_setsockopt+0xc8/0x130 [ 1617.670018] [] tcp_setsockopt+0x88/0xe0 [ 1617.670027] [] sock_common_setsockopt+0x9a/0xe0 [ 1617.670035] [] SyS_setsockopt+0x166/0x260 [ 1617.670042] [] ? SyS_recv+0x40/0x40 [ 1617.670051] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1617.670060] [] ? SyS_clock_settime+0x220/0x220 [ 1617.670067] [] ? do_syscall_64+0x48/0x550 [ 1617.670074] [] ? SyS_recv+0x40/0x40 [ 1617.670082] [] do_syscall_64+0x19f/0x550 [ 1617.670090] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1617.670093] Mem-Info: [ 1617.670114] active_anon:219782 inactive_anon:455215 isolated_anon:0 [ 1617.670114] active_file:4909 inactive_file:21496 isolated_file:0 [ 1617.670114] unevictable:0 dirty:64 writeback:0 unstable:0 [ 1617.670114] slab_reclaimable:6991 slab_unreclaimable:69822 [ 1617.670114] mapped:73238 shmem:463370 pagetables:23279 bounce:0 [ 1617.670114] free:771890 free_pcp:573 free_cma:0 [ 1617.670129] Node 0 active_anon:879128kB inactive_anon:1820860kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292952kB dirty:256kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1617.670150] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1617.670179] Normal free:73096kB min:5580kB low:9168kB high:12756kB active_anon:879056kB inactive_anon:1820860kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:256kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27964kB slab_unreclaimable:278880kB kernel_stack:31040kB pagetables:93016kB bounce:0kB free_pcp:864kB local_pcp:200kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1617.670237] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 256*4kB (UME) 427*8kB (UME) 245*16kB (UME) 148*32kB (UME) 68*64kB (UME) 147*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 73128kB 489774 total pagecache pages [ 1617.670289] 0 pages in swap cache [ 1617.670293] Swap cache stats: add 0, delete 0, find 0/0 [ 1617.670295] Free swap = 0kB [ 1617.670298] Total swap = 0kB [ 1617.670300] 1965979 pages RAM [ 1617.670302] 0 pages HighMem/MovableOnly [ 1617.670305] 313617 pages reserved [ 1617.714494] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1617.714512] CPU: 0 PID: 16357 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1617.714531] ffff8801a3f97888 ffffffff81b42e79 1ffff100347f2f13 ffff8801a41a2f80 [ 1617.714545] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801a3f979d0 [ 1617.714558] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1617.714561] Call Trace: [ 1617.714580] [] dump_stack+0xc1/0x128 [ 1617.714590] [] warn_alloc.cold.31+0x7f/0x9c [ 1617.714601] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1617.714609] [] ? depot_save_stack+0x11c/0x470 [ 1617.714619] [] ? save_stack_trace+0x16/0x20 [ 1617.714628] [] ? xt_alloc_table_info+0x70/0x100 [ 1617.714638] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1617.714645] [] ? nf_setsockopt+0x6d/0xc0 [ 1617.714654] [] ? check_preemption_disabled+0x3b/0x200 [ 1617.714662] [] __vmalloc_node_range+0x35e/0x600 [ 1617.714672] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1617.714679] [] vmalloc+0x5b/0x70 [ 1617.714687] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1617.714695] [] xt_alloc_entry_offsets+0x41/0x60 [ 1617.714703] [] translate_table+0x215/0x1690 [ 1617.714712] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1617.714721] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1617.714729] [] ? __check_object_size+0x248/0x38e [ 1617.714737] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1617.714746] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1617.714757] [] ? mutex_unlock+0x9/0x10 [ 1617.714765] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1617.714773] [] nf_setsockopt+0x6d/0xc0 [ 1617.714782] [] ipv6_setsockopt+0xc8/0x130 [ 1617.714791] [] tcp_setsockopt+0x88/0xe0 [ 1617.714799] [] sock_common_setsockopt+0x9a/0xe0 [ 1617.714807] [] SyS_setsockopt+0x166/0x260 [ 1617.714815] [] ? SyS_recv+0x40/0x40 [ 1617.714824] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1617.714832] [] ? SyS_clock_settime+0x220/0x220 [ 1617.714840] [] ? do_syscall_64+0x48/0x550 [ 1617.714847] [] ? SyS_recv+0x40/0x40 [ 1617.714854] [] do_syscall_64+0x19f/0x550 [ 1617.714863] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1617.714867] Mem-Info: [ 1617.714888] active_anon:219782 inactive_anon:455215 isolated_anon:0 [ 1617.714888] active_file:4909 inactive_file:21496 isolated_file:0 [ 1617.714888] unevictable:0 dirty:64 writeback:0 unstable:0 [ 1617.714888] slab_reclaimable:6991 slab_unreclaimable:69822 [ 1617.714888] mapped:73238 shmem:463370 pagetables:23279 bounce:0 [ 1617.714888] free:771858 free_pcp:556 free_cma:0 [ 1617.714903] Node 0 active_anon:879128kB inactive_anon:1820860kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292952kB dirty:256kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1617.714923] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1617.714951] Normal free:72968kB min:5580kB low:9168kB high:12756kB active_anon:879056kB inactive_anon:1820860kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:256kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27964kB slab_unreclaimable:278880kB kernel_stack:31104kB pagetables:93016kB bounce:0kB free_pcp:796kB local_pcp:608kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1617.715010] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 256*4kB (UME) 427*8kB (UME) 245*16kB (UME) 143*32kB (UME) 68*64kB (UME) 147*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 72968kB 489774 total pagecache pages [ 1617.715063] 0 pages in swap cache [ 1617.715068] Swap cache stats: add 0, delete 0, find 0/0 [ 1617.715070] Free swap = 0kB [ 1617.715072] Total swap = 0kB [ 1617.715075] 1965979 pages RAM [ 1617.715077] 0 pages HighMem/MovableOnly [ 1617.715079] 313617 pages reserved [ 1618.506872] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1618.506884] CPU: 0 PID: 16365 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1618.506904] ffff88019996f888 ffffffff81b42e79 1ffff1003332df13 ffff8801997b97c0 [ 1618.506918] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019996f9d0 [ 1618.506931] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1618.506933] Call Trace: [ 1618.506951] [] dump_stack+0xc1/0x128 [ 1618.506962] [] warn_alloc.cold.31+0x7f/0x9c [ 1618.506973] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1618.506984] [] ? depot_save_stack+0x11c/0x470 [ 1618.506994] [] ? save_stack_trace+0x16/0x20 [ 1618.507003] [] ? xt_alloc_table_info+0x70/0x100 [ 1618.507012] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1618.507020] [] ? nf_setsockopt+0x6d/0xc0 [ 1618.507029] [] ? check_preemption_disabled+0x3b/0x200 [ 1618.507037] [] __vmalloc_node_range+0x35e/0x600 [ 1618.507046] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1618.507053] [] vmalloc+0x5b/0x70 [ 1618.507061] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1618.507069] [] xt_alloc_entry_offsets+0x41/0x60 [ 1618.507077] [] translate_table+0x215/0x1690 [ 1618.507085] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1618.507094] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1618.507103] [] ? __check_object_size+0x248/0x38e [ 1618.507112] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1618.507121] [] ? compat_do_ip6t_set_ctl+0x140/0x140 ** 7 printk messages dropped ** [ 1618.507187] [] ? SyS_recv+0x40/0x40 ** 2 printk messages dropped ** [ 1618.507213] [] ? do_syscall_64+0x48/0x550 ** 12 printk messages dropped ** [ 1618.507453] 489773 total pagecache pages [ 1618.507458] 0 pages in swap cache ** 14 printk messages dropped ** [ 1620.396920] [] ? zone_watermark_ok_safe+0x250/0x250 ** 13 printk messages dropped ** [ 1620.397043] [] ? compat_do_ip6t_get_ctl+0x940/0x940 ** 2 printk messages dropped ** [ 1620.397068] [] ? compat_do_ip6t_set_ctl+0x140/0x140 ** 17 printk messages dropped ** [ 1620.397262] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB ** 14 printk messages dropped ** [ 1620.445040] CPU: 1 PID: 16389 Comm: syz-executor.4 Not tainted 4.9.141+ #1 ** 10 printk messages dropped ** [ 1620.445174] [] ? do_ip6t_set_ctl+0x235/0x470 ** 6 printk messages dropped ** [ 1620.445231] [] xt_alloc_entry_offsets+0x41/0x60 ** 6 printk messages dropped ** [ 1620.445293] [] ? mutex_unlock+0x9/0x10 ** 18 printk messages dropped ** [ 1620.445488] lowmem_reserve[]: 0 3505 3505 ** 4 printk messages dropped ** [ 1620.445625] 489791 total pagecache pages ** 21 printk messages dropped ** [ 1620.809163] [] ? check_preemption_disabled+0x3b/0x200 ** 21 printk messages dropped ** [ 1620.809348] [] ? do_syscall_64+0x48/0x550 ** 6 printk messages dropped ** [ 1620.809437] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB ** 14 printk messages dropped ** [ 1621.143273] CPU: 0 PID: 16412 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1621.143289] ffff8801d2ad7888 ffffffff81b42e79 1ffff1003a55af13 ffff8801d1eac740 ** 1 printk messages dropped ** [ 1621.143313] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 ** 3 printk messages dropped ** [ 1621.143351] [] ? zone_watermark_ok_safe+0x250/0x250 ** 14 printk messages dropped ** [ 1621.143473] [] ? __check_object_size+0x248/0x38e ** 2 printk messages dropped ** [ 1621.143498] [] ? mutex_unlock+0x9/0x10 ** 10 printk messages dropped ** [ 1621.143581] [] ? SyS_recv+0x40/0x40 [ 1621.143588] [] do_syscall_64+0x19f/0x550 ** 3 printk messages dropped ** [ 1621.143632] Node 0 active_anon:879260kB inactive_anon:1820960kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292952kB dirty:256kB writeback:0kB shmem:1853548kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no ** 1 printk messages dropped ** [ 1621.143660] lowmem_reserve[]: 0 3505 3505 ** 13 printk messages dropped ** [ 1621.172999] CPU: 0 PID: 16418 Comm: syz-executor.4 Not tainted 4.9.141+ #1 ** 17 printk messages dropped ** [ 1621.173160] [] xt_alloc_entry_offsets+0x41/0x60 ** 2 printk messages dropped ** [ 1621.173183] [] ? compat_do_ip6t_get_ctl+0x940/0x940 ** 3 printk messages dropped ** [ 1621.173216] [] ? mutex_unlock+0x9/0x10 ** 6 printk messages dropped ** [ 1621.173271] [] ? SyS_recv+0x40/0x40 ** 26 printk messages dropped ** [ 1622.142071] audit: type=1400 audit(1565077646.782:118884): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1622.209384] audit: type=1400 audit(1565077646.852:118885): avc: denied { dac_override } for pid=16434 comm="syz-executor.5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 ** 2 printk messages dropped ** [ 1622.226575] audit: type=1400 audit(1565077646.862:118888): avc: denied { sys_admin } for pid=2103 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1622.240747] audit: type=1400 audit(1565077646.882:118889): avc: denied { sys_admin } for pid=2103 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1622.300876] audit: type=1400 audit(1565077646.942:118890): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1622.311724] audit: type=1400 audit(1565077646.952:118891): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 ** 1 printk messages dropped ** [ 1624.301201] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) ** 3 printk messages dropped ** [ 1624.301259] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 ** 24 printk messages dropped ** [ 1624.301483] [] ipv6_setsockopt+0xc8/0x130 ** 13 printk messages dropped ** [ 1624.301629] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB ** 52 printk messages dropped ** [ 1624.361983] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1624.361986] Mem-Info: [ 1624.362005] active_anon:219854 inactive_anon:455235 isolated_anon:0 [ 1624.362005] active_file:4909 inactive_file:21496 isolated_file:0 [ 1624.362005] unevictable:0 dirty:64 writeback:0 unstable:0 [ 1624.362005] slab_reclaimable:6995 slab_unreclaimable:70069 [ 1624.362005] mapped:73238 shmem:463370 pagetables:23401 bounce:0 [ 1624.362005] free:771308 free_pcp:597 free_cma:0 [ 1624.362018] Node 0 active_anon:879416kB inactive_anon:1820940kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292952kB dirty:256kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1624.362037] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1624.362066] Normal free:70768kB min:5580kB low:9168kB high:12756kB active_anon:879344kB inactive_anon:1820940kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:256kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27980kB slab_unreclaimable:279868kB kernel_stack:31328kB pagetables:93504kB bounce:0kB free_pcp:960kB local_pcp:444kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1624.362127] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 158*4kB (UME) 401*8kB (UME) 223*16kB (UME) 139*32kB (UME) 54*64kB (UME) 145*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 70736kB 489774 total pagecache pages [ 1624.362175] 0 pages in swap cache [ 1624.362179] Swap cache stats: add 0, delete 0, find 0/0 [ 1624.362181] Free swap = 0kB [ 1624.362183] Total swap = 0kB [ 1624.362185] 1965979 pages RAM [ 1624.362187] 0 pages HighMem/MovableOnly [ 1624.362189] 313617 pages reserved [ 1624.624505] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1624.624516] CPU: 1 PID: 16476 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1624.624531] ffff880190807888 ffffffff81b42e79 1ffff10032100f13 ffff8801a5d35f00 [ 1624.624542] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801908079d0 [ 1624.624554] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1624.624557] Call Trace: [ 1624.624574] [] dump_stack+0xc1/0x128 [ 1624.624586] [] warn_alloc.cold.31+0x7f/0x9c [ 1624.624598] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1624.624609] [] ? depot_save_stack+0x11c/0x470 [ 1624.624620] [] ? save_stack_trace+0x16/0x20 [ 1624.624628] [] ? xt_alloc_table_info+0x70/0x100 [ 1624.624641] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1624.624650] [] ? nf_setsockopt+0x6d/0xc0 [ 1624.624663] [] ? check_preemption_disabled+0x3b/0x200 [ 1624.624674] [] __vmalloc_node_range+0x35e/0x600 [ 1624.624686] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1624.624694] [] vmalloc+0x5b/0x70 [ 1624.624705] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1624.624715] [] xt_alloc_entry_offsets+0x41/0x60 [ 1624.624724] [] translate_table+0x215/0x1690 [ 1624.624732] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1624.624741] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1624.624750] [] ? __check_object_size+0x248/0x38e [ 1624.624758] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1624.624767] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1624.624776] [] ? mutex_unlock+0x9/0x10 [ 1624.624785] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1624.624792] [] nf_setsockopt+0x6d/0xc0 [ 1624.624802] [] ipv6_setsockopt+0xc8/0x130 [ 1624.624810] [] tcp_setsockopt+0x88/0xe0 [ 1624.624819] [] sock_common_setsockopt+0x9a/0xe0 [ 1624.624826] [] SyS_setsockopt+0x166/0x260 [ 1624.624834] [] ? SyS_recv+0x40/0x40 [ 1624.624843] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1624.624850] [] ? SyS_clock_settime+0x220/0x220 [ 1624.624859] [] ? do_syscall_64+0x48/0x550 [ 1624.624866] [] ? SyS_recv+0x40/0x40 [ 1624.624873] [] do_syscall_64+0x19f/0x550 [ 1624.624881] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1624.624885] Mem-Info: [ 1624.624904] active_anon:219837 inactive_anon:455247 isolated_anon:0 [ 1624.624904] active_file:4909 inactive_file:21496 isolated_file:0 [ 1624.624904] unevictable:0 dirty:65 writeback:0 unstable:0 [ 1624.624904] slab_reclaimable:6995 slab_unreclaimable:70090 [ 1624.624904] mapped:73217 shmem:463386 pagetables:23346 bounce:0 [ 1624.624904] free:771360 free_pcp:567 free_cma:0 [ 1624.624919] Node 0 active_anon:879348kB inactive_anon:1820988kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292868kB dirty:260kB writeback:0kB shmem:1853544kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1624.624939] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1624.624976] Normal free:70976kB min:5580kB low:9168kB high:12756kB active_anon:879276kB inactive_anon:1820988kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:260kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27980kB slab_unreclaimable:279952kB kernel_stack:31328kB pagetables:93284kB bounce:0kB free_pcp:840kB local_pcp:440kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1624.625036] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 220*4kB (UME) 400*8kB (ME) 223*16kB (UME) 138*32kB (ME) 54*64kB (UME) 145*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 70944kB 489790 total pagecache pages [ 1624.625089] 0 pages in swap cache [ 1624.625094] Swap cache stats: add 0, delete 0, find 0/0 [ 1624.625096] Free swap = 0kB [ 1624.625097] Total swap = 0kB [ 1624.625100] 1965979 pages RAM [ 1624.625101] 0 pages HighMem/MovableOnly [ 1624.625103] 313617 pages reserved [ 1624.697041] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1624.697052] CPU: 1 PID: 16480 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1624.697070] ffff88019cd1f888 ffffffff81b42e79 1ffff100339a3f13 ffff8801a9ef8000 [ 1624.697083] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019cd1f9d0 [ 1624.697097] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1624.697100] Call Trace: [ 1624.697114] [] dump_stack+0xc1/0x128 [ 1624.697124] [] warn_alloc.cold.31+0x7f/0x9c [ 1624.697137] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1624.697145] [] ? depot_save_stack+0x11c/0x470 [ 1624.697155] [] ? save_stack_trace+0x16/0x20 [ 1624.697168] [] ? xt_alloc_table_info+0x70/0x100 [ 1624.697183] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1624.697192] [] ? nf_setsockopt+0x6d/0xc0 [ 1624.697203] [] ? check_preemption_disabled+0x3b/0x200 [ 1624.697214] [] __vmalloc_node_range+0x35e/0x600 [ 1624.697225] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1624.697232] [] vmalloc+0x5b/0x70 [ 1624.697240] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1624.697248] [] xt_alloc_entry_offsets+0x41/0x60 [ 1624.697257] [] translate_table+0x215/0x1690 [ 1624.697265] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1624.697274] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1624.697283] [] ? __check_object_size+0x248/0x38e [ 1624.697291] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1624.697300] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1624.697310] [] ? mutex_unlock+0x9/0x10 [ 1624.697318] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1624.697326] [] nf_setsockopt+0x6d/0xc0 [ 1624.697335] [] ipv6_setsockopt+0xc8/0x130 [ 1624.697343] [] tcp_setsockopt+0x88/0xe0 [ 1624.697353] [] sock_common_setsockopt+0x9a/0xe0 [ 1624.697361] [] SyS_setsockopt+0x166/0x260 [ 1624.697374] [] ? SyS_recv+0x40/0x40 [ 1624.697386] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1624.697397] [] ? SyS_clock_settime+0x220/0x220 [ 1624.697407] [] ? do_syscall_64+0x48/0x550 [ 1624.697416] [] ? SyS_recv+0x40/0x40 [ 1624.697426] [] do_syscall_64+0x19f/0x550 [ 1624.697436] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1624.697441] Mem-Info: [ 1624.697466] active_anon:219837 inactive_anon:455247 isolated_anon:0 [ 1624.697466] active_file:4909 inactive_file:21496 isolated_file:0 [ 1624.697466] unevictable:0 dirty:65 writeback:0 unstable:0 [ 1624.697466] slab_reclaimable:6995 slab_unreclaimable:70090 [ 1624.697466] mapped:73217 shmem:463386 pagetables:23346 bounce:0 [ 1624.697466] free:771360 free_pcp:614 free_cma:0 [ 1624.697481] Node 0 active_anon:879348kB inactive_anon:1820988kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292868kB dirty:260kB writeback:0kB shmem:1853544kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1624.697502] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1624.697531] Normal free:70976kB min:5580kB low:9168kB high:12756kB active_anon:879276kB inactive_anon:1820988kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:260kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27980kB slab_unreclaimable:279952kB kernel_stack:31264kB pagetables:93284kB bounce:0kB free_pcp:1028kB local_pcp:340kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1624.697591] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 220*4kB (UME) 400*8kB (ME) 223*16kB (UME) 139*32kB (UME) 53*64kB (ME) 145*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 70912kB 489790 total pagecache pages [ 1624.697644] 0 pages in swap cache [ 1624.697648] Swap cache stats: add 0, delete 0, find 0/0 [ 1624.697650] Free swap = 0kB [ 1624.697652] Total swap = 0kB [ 1624.697654] 1965979 pages RAM [ 1624.697656] 0 pages HighMem/MovableOnly [ 1624.697658] 313617 pages reserved [ 1627.186604] audit_printk_skb: 1296 callbacks suppressed [ 1627.186613] audit: type=1400 audit(1565077651.822:119325): avc: denied { sys_admin } for pid=2099 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1627.202118] audit: type=1400 audit(1565077651.832:119326): avc: denied { sys_admin } for pid=2099 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1627.234361] audit: type=1400 audit(1565077651.872:119327): avc: denied { sys_admin } for pid=2099 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1627.279795] audit: type=1400 audit(1565077651.922:119328): avc: denied { sys_admin } for pid=2099 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1627.312318] audit: type=1400 audit(1565077651.952:119329): avc: denied { net_admin } for pid=16515 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1627.315885] audit: type=1400 audit(1565077651.952:119330): avc: denied { net_raw } for pid=16516 comm="syz-executor.1" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1627.334017] audit: type=1400 audit(1565077651.972:119332): avc: denied { sys_admin } for pid=2102 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1627.334024] audit: type=1400 audit(1565077651.952:119331): avc: denied { sys_admin } for pid=2101 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1627.335893] audit: type=1400 audit(1565077651.972:119333): avc: denied { sys_admin } for pid=2102 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1627.340532] audit: type=1400 audit(1565077651.982:119334): avc: denied { sys_admin } for pid=2101 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1627.854658] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1627.854668] CPU: 1 PID: 16528 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1627.854686] ffff8801c83af888 ffffffff81b42e79 1ffff10039075f13 ffff8801d8615f00 [ 1627.854700] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801c83af9d0 [ 1627.854714] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1627.854717] Call Trace: [ 1627.854736] [] dump_stack+0xc1/0x128 [ 1627.854747] [] warn_alloc.cold.31+0x7f/0x9c [ 1627.854757] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1627.854766] [] ? depot_save_stack+0x11c/0x470 [ 1627.854779] [] ? save_stack_trace+0x16/0x20 [ 1627.854790] [] ? xt_alloc_table_info+0x70/0x100 [ 1627.854800] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1627.854808] [] ? nf_setsockopt+0x6d/0xc0 [ 1627.854816] [] ? check_preemption_disabled+0x3b/0x200 [ 1627.854825] [] __vmalloc_node_range+0x35e/0x600 [ 1627.854834] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1627.854842] [] vmalloc+0x5b/0x70 [ 1627.854850] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1627.854858] [] xt_alloc_entry_offsets+0x41/0x60 [ 1627.854867] [] translate_table+0x215/0x1690 [ 1627.854875] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1627.854884] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1627.854893] [] ? __check_object_size+0x248/0x38e [ 1627.854901] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1627.854910] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1627.854920] [] ? mutex_unlock+0x9/0x10 [ 1627.854928] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1627.854936] [] nf_setsockopt+0x6d/0xc0 [ 1627.854945] [] ipv6_setsockopt+0xc8/0x130 [ 1627.854953] [] tcp_setsockopt+0x88/0xe0 [ 1627.854962] [] sock_common_setsockopt+0x9a/0xe0 [ 1627.854970] [] SyS_setsockopt+0x166/0x260 [ 1627.854977] [] ? SyS_recv+0x40/0x40 [ 1627.854986] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1627.854994] [] ? SyS_clock_settime+0x220/0x220 [ 1627.855002] [] ? do_syscall_64+0x48/0x550 [ 1627.855009] [] ? SyS_recv+0x40/0x40 [ 1627.855016] [] do_syscall_64+0x19f/0x550 [ 1627.855025] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1627.855028] Mem-Info: [ 1627.855052] active_anon:219878 inactive_anon:455254 isolated_anon:0 [ 1627.855052] active_file:4909 inactive_file:21496 isolated_file:0 [ 1627.855052] unevictable:0 dirty:65 writeback:0 unstable:0 [ 1627.855052] slab_reclaimable:6999 slab_unreclaimable:70103 [ 1627.855052] mapped:73245 shmem:463387 pagetables:23393 bounce:0 [ 1627.855052] free:771238 free_pcp:499 free_cma:0 [ 1627.855070] Node 0 active_anon:879512kB inactive_anon:1821016kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292980kB dirty:260kB writeback:0kB shmem:1853548kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1627.855090] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1627.855117] Normal free:70488kB min:5580kB low:9168kB high:12756kB active_anon:879440kB inactive_anon:1821016kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:260kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27996kB slab_unreclaimable:280004kB kernel_stack:31392kB pagetables:93472kB bounce:0kB free_pcp:568kB local_pcp:312kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1627.855193] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 104*4kB (UME) 399*8kB (ME) 198*16kB (UME) 143*32kB (UME) 58*64kB (UME) 145*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 70488kB 489791 total pagecache pages [ 1627.855242] 0 pages in swap cache [ 1627.855247] Swap cache stats: add 0, delete 0, find 0/0 [ 1627.855249] Free swap = 0kB [ 1627.855251] Total swap = 0kB [ 1627.855253] 1965979 pages RAM [ 1627.855255] 0 pages HighMem/MovableOnly [ 1627.855257] 313617 pages reserved [ 1627.857431] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1627.857442] CPU: 0 PID: 16536 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1627.857465] ffff88019d587888 ffffffff81b42e79 1ffff10033ab0f13 ffff88019cb397c0 [ 1627.857479] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019d5879d0 [ 1627.857493] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1627.857495] Call Trace: [ 1627.857509] [] dump_stack+0xc1/0x128 [ 1627.857520] [] warn_alloc.cold.31+0x7f/0x9c [ 1627.857530] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1627.857538] [] ? depot_save_stack+0x11c/0x470 [ 1627.857547] [] ? save_stack_trace+0x16/0x20 [ 1627.857556] [] ? xt_alloc_table_info+0x70/0x100 [ 1627.857565] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1627.857572] [] ? nf_setsockopt+0x6d/0xc0 [ 1627.857581] [] ? check_preemption_disabled+0x3b/0x200 [ 1627.857589] [] __vmalloc_node_range+0x35e/0x600 [ 1627.857598] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1627.857606] [] vmalloc+0x5b/0x70 [ 1627.857613] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1627.857631] [] xt_alloc_entry_offsets+0x41/0x60 [ 1627.857642] [] translate_table+0x215/0x1690 [ 1627.857652] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1627.857661] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1627.857670] [] ? __check_object_size+0x248/0x38e [ 1627.857678] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1627.857686] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1627.857695] [] ? mutex_unlock+0x9/0x10 [ 1627.857703] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1627.857710] [] nf_setsockopt+0x6d/0xc0 [ 1627.857719] [] ipv6_setsockopt+0xc8/0x130 [ 1627.857726] [] tcp_setsockopt+0x88/0xe0 [ 1627.857736] [] sock_common_setsockopt+0x9a/0xe0 [ 1627.857744] [] SyS_setsockopt+0x166/0x260 [ 1627.857751] [] ? SyS_recv+0x40/0x40 [ 1627.857761] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1627.857769] [] ? SyS_clock_settime+0x220/0x220 [ 1627.857778] [] ? do_syscall_64+0x48/0x550 [ 1627.857785] [] ? SyS_recv+0x40/0x40 [ 1627.857793] [] do_syscall_64+0x19f/0x550 [ 1627.857802] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1627.857862] Mem-Info: [ 1627.857902] active_anon:219878 inactive_anon:455254 isolated_anon:0 [ 1627.857902] active_file:4909 inactive_file:21496 isolated_file:0 [ 1627.857902] unevictable:0 dirty:65 writeback:0 unstable:0 [ 1627.857902] slab_reclaimable:6999 slab_unreclaimable:70103 [ 1627.857902] mapped:73245 shmem:463387 pagetables:23393 bounce:0 [ 1627.857902] free:771238 free_pcp:494 free_cma:0 [ 1627.857926] Node 0 active_anon:879512kB inactive_anon:1821016kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292980kB dirty:260kB writeback:0kB shmem:1853548kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1627.857952] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1627.857982] Normal free:70488kB min:5580kB low:9168kB high:12756kB active_anon:879440kB inactive_anon:1821016kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:260kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27996kB slab_unreclaimable:280004kB kernel_stack:31392kB pagetables:93472kB bounce:0kB free_pcp:548kB local_pcp:236kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1627.858042] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 104*4kB (UME) 399*8kB (ME) 198*16kB (UME) 143*32kB (UME) 58*64kB (UME) 145*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 70488kB 489791 total pagecache pages [ 1627.858094] 0 pages in swap cache [ 1627.858099] Swap cache stats: add 0, delete 0, find 0/0 [ 1627.858101] Free swap = 0kB [ 1627.858103] Total swap = 0kB [ 1627.858106] 1965979 pages RAM [ 1627.858108] 0 pages HighMem/MovableOnly [ 1627.858110] 313617 pages reserved [ 1627.883027] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1627.883037] CPU: 1 PID: 16542 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1627.883055] ffff88019aedf888 ffffffff81b42e79 1ffff100335dbf13 ffff8801ace1af80 [ 1627.883067] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019aedf9d0 [ 1627.883080] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1627.883083] Call Trace: [ 1627.883101] [] dump_stack+0xc1/0x128 [ 1627.883111] [] warn_alloc.cold.31+0x7f/0x9c [ 1627.883126] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1627.883137] [] ? depot_save_stack+0x11c/0x470 [ 1627.883150] [] ? save_stack_trace+0x16/0x20 [ 1627.883162] [] ? xt_alloc_table_info+0x70/0x100 [ 1627.883172] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1627.883179] [] ? nf_setsockopt+0x6d/0xc0 [ 1627.883188] [] ? check_preemption_disabled+0x3b/0x200 [ 1627.883195] [] __vmalloc_node_range+0x35e/0x600 [ 1627.883204] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1627.883211] [] vmalloc+0x5b/0x70 [ 1627.883218] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1627.883226] [] xt_alloc_entry_offsets+0x41/0x60 [ 1627.883233] [] translate_table+0x215/0x1690 [ 1627.883241] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1627.883250] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1627.883259] [] ? __check_object_size+0x248/0x38e [ 1627.883266] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1627.883274] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1627.883283] [] ? mutex_unlock+0x9/0x10 [ 1627.883291] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1627.883298] [] nf_setsockopt+0x6d/0xc0 [ 1627.883307] [] ipv6_setsockopt+0xc8/0x130 [ 1627.883315] [] tcp_setsockopt+0x88/0xe0 [ 1627.883323] [] sock_common_setsockopt+0x9a/0xe0 [ 1627.883330] [] SyS_setsockopt+0x166/0x260 [ 1627.883338] [] ? SyS_recv+0x40/0x40 [ 1627.883347] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1627.883354] [] ? SyS_clock_settime+0x220/0x220 [ 1627.883362] [] ? do_syscall_64+0x48/0x550 [ 1627.883368] [] ? SyS_recv+0x40/0x40 [ 1627.883375] [] do_syscall_64+0x19f/0x550 [ 1627.883383] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1627.883387] Mem-Info: [ 1627.883405] active_anon:219878 inactive_anon:455254 isolated_anon:0 [ 1627.883405] active_file:4909 inactive_file:21496 isolated_file:0 [ 1627.883405] unevictable:0 dirty:65 writeback:0 unstable:0 [ 1627.883405] slab_reclaimable:6999 slab_unreclaimable:70103 [ 1627.883405] mapped:73245 shmem:463387 pagetables:23430 bounce:0 [ 1627.883405] free:771238 free_pcp:472 free_cma:0 [ 1627.883419] Node 0 active_anon:879512kB inactive_anon:1821016kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292980kB dirty:260kB writeback:0kB shmem:1853548kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1627.883438] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1627.883465] Normal free:70488kB min:5580kB low:9168kB high:12756kB active_anon:879440kB inactive_anon:1821016kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:260kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27996kB slab_unreclaimable:280004kB kernel_stack:31392kB pagetables:93620kB bounce:0kB free_pcp:460kB local_pcp:276kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1627.883519] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 104*4kB (UME) 399*8kB (ME) 198*16kB (UME) 143*32kB (UME) 58*64kB (UME) 145*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 70488kB 489791 total pagecache pages [ 1627.883567] 0 pages in swap cache [ 1627.883571] Swap cache stats: add 0, delete 0, find 0/0 [ 1627.883573] Free swap = 0kB [ 1627.883575] Total swap = 0kB [ 1627.883577] 1965979 pages RAM [ 1627.883579] 0 pages HighMem/MovableOnly [ 1627.883581] 313617 pages reserved [ 1627.922991] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1627.923003] CPU: 0 PID: 16543 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1627.923022] ffff88019359f888 ffffffff81b42e79 1ffff100326b3f13 ffff8801c2014740 [ 1627.923034] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019359f9d0 [ 1627.923046] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1627.923048] Call Trace: [ 1627.923064] [] dump_stack+0xc1/0x128 [ 1627.923077] [] warn_alloc.cold.31+0x7f/0x9c [ 1627.923088] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1627.923096] [] ? depot_save_stack+0x11c/0x470 [ 1627.923105] [] ? save_stack_trace+0x16/0x20 [ 1627.923113] [] ? xt_alloc_table_info+0x70/0x100 [ 1627.923121] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1627.923132] [] ? nf_setsockopt+0x6d/0xc0 [ 1627.923142] [] ? check_preemption_disabled+0x3b/0x200 07:47:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x400, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040845, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) [ 1627.923149] [] __vmalloc_node_range+0x35e/0x600 [ 1627.923156] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1627.923162] [] vmalloc+0x5b/0x70 [ 1627.923169] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1627.923176] [] xt_alloc_entry_offsets+0x41/0x60 [ 1627.923183] [] translate_table+0x215/0x1690 [ 1627.923190] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1627.923198] [] ? compat_do_ip6t_get_ctl+0x940/0x940 07:47:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1627.923205] [] ? __check_object_size+0x248/0x38e [ 1627.923212] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1627.923220] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1627.923228] [] ? mutex_unlock+0x9/0x10 [ 1627.923235] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1627.923241] [] nf_setsockopt+0x6d/0xc0 [ 1627.923249] [] ipv6_setsockopt+0xc8/0x130 [ 1627.923256] [] tcp_setsockopt+0x88/0xe0 07:47:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) [ 1627.923264] [] sock_common_setsockopt+0x9a/0xe0 [ 1627.923271] [] SyS_setsockopt+0x166/0x260 [ 1627.923277] [] ? SyS_recv+0x40/0x40 [ 1627.923284] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1627.923291] [] ? SyS_clock_settime+0x220/0x220 [ 1627.923298] [] ? do_syscall_64+0x48/0x550 [ 1627.923304] [] ? SyS_recv+0x40/0x40 [ 1627.923310] [] do_syscall_64+0x19f/0x550 [ 1627.923318] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1627.923321] Mem-Info: [ 1627.923343] active_anon:219878 inactive_anon:455254 isolated_anon:0 [ 1627.923343] active_file:4909 inactive_file:21496 isolated_file:0 [ 1627.923343] unevictable:0 dirty:65 writeback:0 unstable:0 [ 1627.923343] slab_reclaimable:6999 slab_unreclaimable:70103 [ 1627.923343] mapped:73245 shmem:463387 pagetables:23430 bounce:0 [ 1627.923343] free:771270 free_pcp:453 free_cma:0 [ 1627.923365] Node 0 active_anon:879512kB inactive_anon:1821016kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292980kB dirty:260kB writeback:0kB shmem:1853548kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1627.941411] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 07:47:47 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000040)={0xd6ad, 0x3ff, [0x10000, 0x6, 0x5, 0x8001, 0x200], 0xac2b}) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r1 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x2, &(0x7f0000000080)=""/81) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') prctl$PR_SVE_GET_VL(0x33, 0x1d6a5) preadv(r2, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1627.941452] Normal free:70616kB min:5580kB low:9168kB high:12756kB active_anon:879640kB inactive_anon:1821016kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:260kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27996kB slab_unreclaimable:280004kB kernel_stack:31296kB pagetables:93620kB bounce:0kB free_pcp:268kB local_pcp:116kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1627.941522] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 104*4kB (UME) 399*8kB (ME) 198*16kB (UME) 146*32kB (UME) 58*64kB (UME) 145*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 70584kB 07:47:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) connect$inet6(r1, &(0x7f0000000080), 0x1c) r3 = dup2(r1, r0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3f) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x4) 07:47:47 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0xe8, 0x8}, 0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) r2 = getgid() setgid(r2) r3 = socket(0x5, 0x4, 0x3f) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x600000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x148, r4, 0x801, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x438}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x28c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2d5a6deb}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x34, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x71f}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4d47}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0x148}}, 0x4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc048}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1b0, r4, 0x1, 0x100, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x18c, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x277}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @remote, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffffffffffffff, @loopback, 0xffffffff}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa7c}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9112, @rand_addr="023c0e841ce2560836a9803734847477", 0x10000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8001, @ipv4={[], [], @remote}, 0xfffffffffffffffe}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6b6, @local, 0x5}}}}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000640)={'syzkaller1\x00', &(0x7f0000000600)=@ethtool_cmd={0x16, 0x80000001, 0x40, 0x800, 0x9, 0x0, 0x0, 0x80000000, 0xca2, 0x1ff, 0x9, 0x1, 0x14c00, 0x7ff, 0x1ff, 0x4, [0x5, 0x6]}}) 489791 total pagecache pages [ 1627.941585] 0 pages in swap cache [ 1627.941590] Swap cache stats: add 0, delete 0, find 0/0 [ 1627.941592] Free swap = 0kB [ 1627.941594] Total swap = 0kB 07:47:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpgid(0x0) ioprio_set$pid(0x2, r3, 0x8ed4) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x3c) [ 1627.941597] 1965979 pages RAM [ 1627.941599] 0 pages HighMem/MovableOnly [ 1627.941601] 313617 pages reserved [ 1628.510591] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1628.564053] CPU: 1 PID: 16561 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1628.564078] ffff88019cd17888 ffffffff81b42e79 1ffff100339a2f13 ffff8801c46bc740 [ 1628.564093] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019cd179d0 [ 1628.564106] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1628.564108] Call Trace: [ 1628.564127] [] dump_stack+0xc1/0x128 [ 1628.564140] [] warn_alloc.cold.31+0x7f/0x9c [ 1628.564154] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1628.564163] [] ? depot_save_stack+0x11c/0x470 [ 1628.564174] [] ? save_stack_trace+0x16/0x20 07:47:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000002c0)={0x9, {{0xa, 0x4e21, 0x1, @ipv4={[], [], @multicast2}, 0xaf40}}}, 0x88) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000240)=@nfc={0x27, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000080)=@vsock, 0xe, 0x0}}], 0x4000000000001b0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$TCFLSH(r2, 0x540b, 0xffffffff) accept$unix(r2, &(0x7f00000001c0), &(0x7f0000000040)=0x6e) [ 1628.564182] [] ? xt_alloc_table_info+0x70/0x100 07:47:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1628.564192] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1628.564200] [] ? nf_setsockopt+0x6d/0xc0 [ 1628.564209] [] ? check_preemption_disabled+0x3b/0x200 07:47:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000140)='|\xc8z\xfa', 0x2) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) [ 1628.564217] [] __vmalloc_node_range+0x35e/0x600 [ 1628.564226] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1628.564234] [] vmalloc+0x5b/0x70 [ 1628.564242] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1628.564250] [] xt_alloc_entry_offsets+0x41/0x60 [ 1628.564258] [] translate_table+0x215/0x1690 [ 1628.564266] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1628.564276] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1628.564285] [] ? __check_object_size+0x248/0x38e [ 1628.564293] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1628.564302] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1628.564312] [] ? mutex_unlock+0x9/0x10 07:47:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x10, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1628.564320] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1628.564327] [] nf_setsockopt+0x6d/0xc0 [ 1628.564336] [] ipv6_setsockopt+0xc8/0x130 [ 1628.564343] [] tcp_setsockopt+0x88/0xe0 [ 1628.564352] [] sock_common_setsockopt+0x9a/0xe0 [ 1628.564359] [] SyS_setsockopt+0x166/0x260 [ 1628.564365] [] ? SyS_recv+0x40/0x40 [ 1628.564373] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1628.564381] [] ? SyS_clock_settime+0x220/0x220 [ 1628.564388] [] ? do_syscall_64+0x48/0x550 [ 1628.564395] [] ? SyS_recv+0x40/0x40 [ 1628.564402] [] do_syscall_64+0x19f/0x550 [ 1628.564410] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1628.564413] Mem-Info: [ 1628.564434] active_anon:219901 inactive_anon:455241 isolated_anon:0 [ 1628.564434] active_file:4909 inactive_file:21496 isolated_file:0 [ 1628.564434] unevictable:0 dirty:63 writeback:0 unstable:0 [ 1628.564434] slab_reclaimable:6999 slab_unreclaimable:70115 [ 1628.564434] mapped:73213 shmem:463370 pagetables:23430 bounce:0 [ 1628.564434] free:771154 free_pcp:518 free_cma:0 [ 1628.564448] Node 0 active_anon:879604kB inactive_anon:1820964kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292852kB dirty:252kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1628.564468] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:720kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1628.564497] Normal free:70152kB min:5580kB low:9168kB high:12756kB active_anon:879532kB inactive_anon:1820964kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:252kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27996kB slab_unreclaimable:280052kB kernel_stack:31488kB pagetables:93620kB bounce:0kB free_pcp:644kB local_pcp:32kB free_cma:0kB lowmem_reserve[]: 0 0 0 07:47:49 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r4) write$FUSE_NOTIFY_POLL(r3, 0x0, 0x0) fchdir(r2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) fcntl$lock(r2, 0x6, &(0x7f00000004c0)={0x0, 0x0, 0x80000000, 0x2, r5}) clone(0x210200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() clone(0x1000040000001, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r4, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=""/40, 0x28, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r7, 0x4) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x80) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x400200, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ptrace(0x10, r6) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000400)=[0xc0e, 0x81]) fstatfs(r1, &(0x7f0000000500)=""/148) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000640)) wait4(r6, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000340)=0x6, 0xffffffffffffffbc) request_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffc) 07:47:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x10, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1628.564556] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 102*4kB (E) 396*8kB (UME) 197*16kB (ME) 138*32kB (ME) 55*64kB (UME) 145*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 70088kB 489774 total pagecache pages [ 1628.564619] 0 pages in swap cache [ 1628.564623] Swap cache stats: add 0, delete 0, find 0/0 [ 1628.564626] Free swap = 0kB [ 1628.564628] Total swap = 0kB [ 1628.564630] 1965979 pages RAM [ 1628.564633] 0 pages HighMem/MovableOnly [ 1628.564635] 313617 pages reserved [ 1628.946839] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1628.946850] CPU: 0 PID: 16562 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1628.946868] ffff88019368f888 ffffffff81b42e79 1ffff100326d1f13 ffff88019e37df00 [ 1628.946883] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019368f9d0 [ 1628.946897] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1628.946900] Call Trace: 07:47:50 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) 07:47:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x10, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:50 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0)) preadv(r0, &(0x7f00000017c0), 0x0, 0x1f000003) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0xfffffffffffffff5, 0x8, {{0x40, 0x20, 0x1, 0x101, 0x8, 0x161a, 0x1, 0x9}}}, 0x60) [ 1628.946917] [] dump_stack+0xc1/0x128 [ 1628.946931] [] warn_alloc.cold.31+0x7f/0x9c [ 1628.946945] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1628.946953] [] ? depot_save_stack+0x11c/0x470 [ 1628.946963] [] ? save_stack_trace+0x16/0x20 [ 1628.946973] [] ? xt_alloc_table_info+0x70/0x100 [ 1628.946981] [] ? do_ip6t_set_ctl+0x235/0x470 07:47:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f511000000000000000000000040000000b38e009e74000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) [ 1628.946991] [] ? nf_setsockopt+0x6d/0xc0 [ 1628.947000] [] ? check_preemption_disabled+0x3b/0x200 [ 1628.947009] [] __vmalloc_node_range+0x35e/0x600 [ 1628.947018] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1628.947025] [] vmalloc+0x5b/0x70 [ 1628.947033] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1628.947040] [] xt_alloc_entry_offsets+0x41/0x60 [ 1628.947049] [] translate_table+0x215/0x1690 07:47:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1628.947057] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1628.947066] [] ? compat_do_ip6t_get_ctl+0x940/0x940 07:47:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = gettid() ioctl$TIOCSIG(r2, 0x40045436, 0x2a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) 07:47:50 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x8, 0x8, 0x8374}) [ 1628.947075] [] ? __check_object_size+0x248/0x38e 07:47:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xe0a00, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @local}, 0x27}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0xa4}) [ 1628.947083] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1628.947092] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1628.947102] [] ? mutex_unlock+0x9/0x10 [ 1628.947110] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1628.947118] [] nf_setsockopt+0x6d/0xc0 [ 1628.947127] [] ipv6_setsockopt+0xc8/0x130 [ 1628.947136] [] tcp_setsockopt+0x88/0xe0 [ 1628.947145] [] sock_common_setsockopt+0x9a/0xe0 07:47:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000140)={0x7, {{0xa, 0x4e23, 0x400, @local, 0x7}}}, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r2, 0x4000b) sendfile(r0, r2, 0x0, 0x802000000020011) [ 1628.947153] [] SyS_setsockopt+0x166/0x260 [ 1628.947160] [] ? SyS_recv+0x40/0x40 [ 1628.947170] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1628.947178] [] ? SyS_clock_settime+0x220/0x220 [ 1628.947186] [] ? do_syscall_64+0x48/0x550 [ 1628.947193] [] ? SyS_recv+0x40/0x40 07:47:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1628.947200] [] do_syscall_64+0x19f/0x550 [ 1628.947209] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1628.947212] Mem-Info: [ 1628.947233] active_anon:219901 inactive_anon:455241 isolated_anon:0 [ 1628.947233] active_file:4909 inactive_file:21496 isolated_file:0 [ 1628.947233] unevictable:0 dirty:63 writeback:0 unstable:0 [ 1628.947233] slab_reclaimable:6999 slab_unreclaimable:70115 [ 1628.947233] mapped:73238 shmem:463370 pagetables:23393 bounce:0 [ 1628.947233] free:771124 free_pcp:627 free_cma:0 07:47:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x38}}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000140)="ff20c6865afb41caa3ea2289d6afd1572c2c33dada6a05", 0x17, r0}, 0x68) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='map_files\x00') setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@empty, @dev={0xac, 0x14, 0x14, 0x20}, @local}, 0xc) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x4000010, r0, 0x0) r2 = getpid() madvise(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0xe) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000240)=@generic={0x3, 0x1, 0x20}) write$P9_RGETLOCK(r1, &(0x7f0000000200)={0x20, 0x37, 0x2, {0x2, 0x81, 0x0, r2, 0x2, '-%'}}, 0x20) write$eventfd(r1, &(0x7f0000000040)=0x3, 0x8) listen(r1, 0x3) [ 1628.947249] Node 0 active_anon:879604kB inactive_anon:1820964kB active_file:19636kB inactive_file:85984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292952kB dirty:252kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:47:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 1628.947269] DMA32 free:3014464kB min:4696kB low:7712kB high:10728kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:408kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:1428kB local_pcp:708kB free_cma:0kB 07:47:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) lowmem_reserve[]: 0 3505 3505 [ 1628.947301] Normal free:70032kB min:5580kB low:9168kB high:12756kB active_anon:879532kB inactive_anon:1820964kB active_file:19636kB inactive_file:85972kB unevictable:0kB writepending:252kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:27996kB slab_unreclaimable:280052kB kernel_stack:31264kB pagetables:93472kB bounce:0kB free_pcp:1080kB local_pcp:576kB free_cma:0kB 07:47:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x800000000000005, 0x0, 0x7, 0xa}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x7c}, 0x48) lowmem_reserve[]: 0 0 0 [ 1628.947362] DMA32: 86*4kB (UM) 71*8kB (UM) 53*16kB (UM) 59*32kB (UM) 54*64kB (UM) 33*128kB (UM) 41*256kB (UM) 37*512kB (UM) 28*1024kB (UM) 18*2048kB (UM) 710*4096kB (UME) = 3014464kB Normal: 104*4kB (UME) 380*8kB (UME) 197*16kB (ME) 141*32kB (UME) 56*64kB (UME) 145*128kB (UM) 60*256kB (UME) 38*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 70128kB 489774 total pagecache pages [ 1628.947416] 0 pages in swap cache [ 1628.947420] Swap cache stats: add 0, delete 0, find 0/0 [ 1628.947423] Free swap = 0kB 07:47:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1628.947425] Total swap = 0kB [ 1628.947427] 1965979 pages RAM [ 1628.947429] 0 pages HighMem/MovableOnly [ 1628.947432] 313617 pages reserved [ 1632.190142] audit_printk_skb: 1209 callbacks suppressed [ 1632.190151] audit: type=1400 audit(1565077656.832:119738): avc: denied { sys_admin } for pid=2103 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1632.192036] audit: type=1400 audit(1565077656.832:119739): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1632.200692] audit: type=1400 audit(1565077656.832:119740): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1632.210505] audit: type=1400 audit(1565077656.842:119741): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1632.212412] audit: type=1400 audit(1565077656.852:119742): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1632.218733] audit: type=1400 audit(1565077656.852:119743): avc: denied { sys_admin } for pid=2103 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1632.230525] audit: type=1400 audit(1565077656.872:119744): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1632.256687] audit: type=1400 audit(1565077656.872:119745): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1632.274398] audit: type=1400 audit(1565077656.912:119746): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1632.276495] audit: type=1400 audit(1565077656.912:119747): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1632.673160] warn_alloc: 1 callbacks suppressed [ 1632.673180] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1632.673192] CPU: 0 PID: 16614 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1632.673210] ffff88018c47f888 ffffffff81b42e79 1ffff1003188ff13 ffff8801c65f17c0 [ 1632.673223] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88018c47f9d0 [ 1632.673234] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1632.673241] Call Trace: [ 1632.673262] [] dump_stack+0xc1/0x128 [ 1632.673275] [] warn_alloc.cold.31+0x7f/0x9c [ 1632.673284] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1632.673292] [] ? depot_save_stack+0x11c/0x470 [ 1632.673301] [] ? save_stack_trace+0x16/0x20 [ 1632.673310] [] ? xt_alloc_table_info+0x70/0x100 [ 1632.673319] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1632.673326] [] ? nf_setsockopt+0x6d/0xc0 [ 1632.673334] [] ? check_preemption_disabled+0x3b/0x200 [ 1632.673342] [] __vmalloc_node_range+0x35e/0x600 [ 1632.673351] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1632.673357] [] vmalloc+0x5b/0x70 [ 1632.673364] [] ? xt_alloc_entry_offsets+0x41/0x60 07:47:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0xfffffffffffffdd5) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x400000004e23, 0x7fff, @loopback}, 0xfffffe38) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:dhcpc_state_t:s0\x00', 0x23) r3 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f4941d8fa1fb"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) 07:47:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept4$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x800) sendfile(r0, r1, 0x0, 0x802000000020011) 07:47:54 executing program 5: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @ipv4={[], [], @local}}, {0xa, 0x0, 0x0, @empty, 0x40000001}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x9}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) r1 = syz_open_pts(0xffffffffffffffff, 0x101000) ioctl$TIOCSIG(r1, 0x40045436, 0x29) 07:47:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000014, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x2a, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1163484000"/26, @ANYPTR, @ANYPTR=&(0x7f0000000280)=ANY=[]], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="6164527d2037d0d866676c6500005607f5110000000000000000000000400000000004b38e000000000000080000a3000000000000000308060000ba020000800000293500000080ffffffff000000000008004000b0efa864f494f31736a3319f788cedfb"], 0x1) ptrace$setopts(0x4206, r6, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$cont(0x18, r6, 0x1, 0x1f) tkill(r6, 0x3c) 07:47:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) clock_getres(0x5, &(0x7f0000000040)) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) [ 1632.673371] [] xt_alloc_entry_offsets+0x41/0x60 [ 1632.673379] [] translate_table+0x215/0x1690 [ 1632.673386] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1632.673394] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1632.673402] [] ? __check_object_size+0x248/0x38e 07:47:55 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x44000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) open(&(0x7f00000003c0)='./file0\x00', 0x40, 0x22) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f00000000c0)=0x2000005) write$input_event(r0, &(0x7f0000000000)={{}, 0x40000000012, 0xffffffffffffffff}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000380)={0x0, @aes256, 0x0, "60df7708e141764f"}) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="c7071d0721a5", 0x6, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="e46c0ceac6af7b04adec6d6d78e75c03637e0ac98aa9da536698b04102322a2b87a24b633c98633e89b6658bb0d04d65f35fd57b46e7365b70b9c639a14203bebe66493beddc9cbb2f1e7b5ce97902a0688c6c5df758d5ecc6227e79cb9a18d60761d0d50097e2b20d2d75a10f190b65586252025598595571", 0x79, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', r3, ':chain\x00'}) 07:47:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1632.673410] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1632.673418] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1632.673426] [] ? mutex_unlock+0x9/0x10 [ 1632.673434] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1632.673441] [] nf_setsockopt+0x6d/0xc0 [ 1632.673449] [] ipv6_setsockopt+0xc8/0x130 [ 1632.673456] [] tcp_setsockopt+0x88/0xe0 [ 1632.673464] [] sock_common_setsockopt+0x9a/0xe0 [ 1632.673471] [] SyS_setsockopt+0x166/0x260 [ 1632.673478] [] ? SyS_recv+0x40/0x40 [ 1632.673486] [] ? SyS_clock_gettime+0x11e/0x1f0 07:47:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0xc02d, 0x3}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xfffffffffffffff6) accept4$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000680)={0x0, @local, @broadcast}, &(0x7f00000006c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000980)=0x14) accept4$packet(r2, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000b40)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000001f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001fc0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002000)={{{@in=@broadcast, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000002100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002140)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000002240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002280)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000002380)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000023c0)={@local, @multicast1, 0x0}, &(0x7f0000002400)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002440)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000002540)=0xe8) getpeername(r0, &(0x7f0000002580)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000002600)=0x80) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002640)={0x0, @initdev, @empty}, &(0x7f0000002680)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000002840)={@empty, 0x0}, &(0x7f0000002880)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000028c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f00000029c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000003300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x802800}, 0xc, &(0x7f00000032c0)={&(0x7f0000002a40)=ANY=[@ANYBLOB='p\b\x00\x00', @ANYRES16=r4, @ANYBLOB="000028bd7000ffdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="b00102003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004009b82000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000000008000100", @ANYRES32=r7, @ANYBLOB="bc0002003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="140102003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000240004003b0402040700000007000107ffffff7f0700060703000000050000041f000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000101000008000600", @ANYRES32=r10, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000800000008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="7800020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400020000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r13, @ANYBLOB="9000020038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040005c3000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000240004000600ff12ff0f00000500040002000000010007bc000000004d46fa0080ffffff08000100", @ANYRES32=r14, @ANYBLOB="7c0002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r15, @ANYBLOB="40625f74785f686173685f746f5f706f7274556d6170786961670096a1c1d7440ec80000000000084d5a8479", @ANYRES32=r16, @ANYBLOB="080007000000000008000100", @ANYRES32=r17, @ANYBLOB="f400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000800000008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400780e000008000100", @ANYRES32=r21, @ANYBLOB="6c0102007c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000004c000400030000334a030000ff7f1b03ff07000009000506ffff0000e2f001a8000000000300ffea6b6f0000e0e60406000400000500090804000000050001000008000000000000ffffff7f3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000048000008000600", @ANYRES32=r22, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000900000008000100", @ANYRES32=r23, @ANYBLOB="b000020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400ff0100003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400f3070000"], 0x870}, 0x1, 0x0, 0x0, 0x800}, 0x4) [ 1632.673493] [] ? SyS_clock_settime+0x220/0x220 07:47:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a3000000000000000d00000080ffffffff000000000000003ff3b0efa864f494f317e700"/88], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) socket$inet6(0xa, 0xa, 0x80) [ 1632.673500] [] ? do_syscall_64+0x48/0x550 [ 1632.673506] [] ? SyS_recv+0x40/0x40 [ 1632.673513] [] do_syscall_64+0x19f/0x550 [ 1632.673520] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 07:47:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x80000001, 0x7f, 0x0, 0x0, 0x1, [{0x8, 0x4, 0x2, 0x0, 0x0, 0x200}]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) sendfile(r0, r1, 0x0, 0x802000000020011) [ 1632.673523] Mem-Info: [ 1632.673543] active_anon:219992 inactive_anon:455250 isolated_anon:0 [ 1632.673543] active_file:4909 inactive_file:21497 isolated_file:0 [ 1632.673543] unevictable:4 dirty:65 writeback:0 unstable:0 [ 1632.673543] slab_reclaimable:6999 slab_unreclaimable:70023 [ 1632.673543] mapped:73238 shmem:463370 pagetables:23563 bounce:0 [ 1632.673543] free:707324 free_pcp:321 free_cma:0 07:47:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1632.673561] Node 0 active_anon:879968kB inactive_anon:1821000kB active_file:19636kB inactive_file:85988kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:292952kB dirty:260kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1632.673580] DMA32 free:2820180kB min:4696kB low:7712kB high:10728kB active_anon:272kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:412kB kernel_stack:224kB pagetables:528kB bounce:0kB free_pcp:324kB local_pcp:164kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1632.673606] Normal free:9116kB min:5580kB low:9168kB high:12756kB active_anon:879696kB inactive_anon:1821000kB active_file:19636kB inactive_file:85976kB unevictable:16kB writepending:260kB present:4718592kB managed:3589316kB mlocked:16kB slab_reclaimable:27996kB slab_unreclaimable:279680kB kernel_stack:31232kB pagetables:93724kB bounce:0kB free_pcp:960kB local_pcp:632kB free_cma:0kB 07:47:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020069c5d291ecd8740a6f2e00800000000d00000080ffffffff00000000000000"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) 07:47:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x100, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317e700"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x0) lowmem_reserve[]: 0 0 0 07:47:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1632.673655] DMA32: 1*4kB (U) 2*8kB (UM) 2*16kB (UM) 3*32kB (M) 7*64kB (UM) 6*128kB (M) 9*256kB (UM) 5*512kB (UM) 4*1024kB (M) 4*2048kB (M) 684*4096kB (UME) = 2820180kB Normal: 131*4kB (ME) 250*8kB (ME) 110*16kB (UME) 73*32kB (UME) 27*64kB (UME) 6*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9116kB 489775 total pagecache pages [ 1632.673695] 0 pages in swap cache [ 1632.673699] Swap cache stats: add 0, delete 0, find 0/0 [ 1632.673701] Free swap = 0kB [ 1632.673702] Total swap = 0kB [ 1632.673705] 1965979 pages RAM [ 1632.673706] 0 pages HighMem/MovableOnly [ 1632.673708] 313617 pages reserved [ 1633.279714] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1633.279725] CPU: 0 PID: 16617 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1633.279742] ffff88010d59f888 ffffffff81b42e79 1ffff10021ab3f13 ffff8801a87c8000 [ 1633.279756] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88010d59f9d0 [ 1633.279768] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1633.279770] Call Trace: [ 1633.279787] [] dump_stack+0xc1/0x128 [ 1633.279797] [] warn_alloc.cold.31+0x7f/0x9c [ 1633.279806] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1633.279814] [] ? depot_save_stack+0x11c/0x470 [ 1633.279824] [] ? save_stack_trace+0x16/0x20 [ 1633.279833] [] ? xt_alloc_table_info+0x70/0x100 [ 1633.279842] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1633.279850] [] ? nf_setsockopt+0x6d/0xc0 [ 1633.279858] [] ? check_preemption_disabled+0x3b/0x200 [ 1633.279867] [] __vmalloc_node_range+0x35e/0x600 [ 1633.279875] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1633.279883] [] vmalloc+0x5b/0x70 [ 1633.279890] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1633.279898] [] xt_alloc_entry_offsets+0x41/0x60 [ 1633.279906] [] translate_table+0x215/0x1690 [ 1633.279914] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1633.279922] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1633.279931] [] ? __check_object_size+0x248/0x38e [ 1633.279939] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1633.279948] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1633.279957] [] ? mutex_unlock+0x9/0x10 [ 1633.279965] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1633.279972] [] nf_setsockopt+0x6d/0xc0 07:47:58 executing program 2: socket$inet6(0xa, 0x2, 0x92) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:47:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}, 0x20) ftruncate(r1, 0x4000b) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x2710}, {r3, r4/1000+10000}}) sendfile(r0, r1, 0x0, 0x802000000020011) 07:47:58 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff676c6500005607f5110000000000000000000000400000000000000000000000a300000000001f000000060000ba020000800000000d000000ddffffffff000000000000004000b0efa864f494f317e7000000000000"], 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x0) 07:47:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x8, 0x1}) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 07:47:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000000)={@loopback}, &(0x7f0000000040)=0x14) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) [ 1633.279981] [] ipv6_setsockopt+0xc8/0x130 [ 1633.279989] [] tcp_setsockopt+0x88/0xe0 [ 1633.279998] [] sock_common_setsockopt+0x9a/0xe0 [ 1633.280005] [] SyS_setsockopt+0x166/0x260 [ 1633.280012] [] ? SyS_recv+0x40/0x40 [ 1633.280021] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1633.280029] [] ? SyS_clock_settime+0x220/0x220 07:47:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1633.280036] [] ? do_syscall_64+0x48/0x550 07:47:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) read(r0, &(0x7f0000000000)=""/13, 0xd) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0xe) write$FUSE_INTERRUPT(r0, &(0x7f0000000140)={0x10}, 0xffffff7b) socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) [ 1633.280043] [] ? SyS_recv+0x40/0x40 [ 1633.280050] [] do_syscall_64+0x19f/0x550 [ 1633.280058] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1633.280061] Mem-Info: [ 1633.280080] active_anon:220067 inactive_anon:455250 isolated_anon:0 [ 1633.280080] active_file:4909 inactive_file:21497 isolated_file:0 [ 1633.280080] unevictable:4 dirty:65 writeback:0 unstable:0 [ 1633.280080] slab_reclaimable:6999 slab_unreclaimable:70092 [ 1633.280080] mapped:73213 shmem:463370 pagetables:23600 bounce:0 [ 1633.280080] free:634508 free_pcp:362 free_cma:0 [ 1633.280095] Node 0 active_anon:880268kB inactive_anon:1821000kB active_file:19636kB inactive_file:85988kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:292852kB dirty:260kB writeback:0kB shmem:1853480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1633.280115] DMA32 free:2528816kB min:4696kB low:7712kB high:10728kB active_anon:572kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:816kB kernel_stack:416kB pagetables:676kB bounce:0kB free_pcp:452kB local_pcp:212kB free_cma:0kB 07:47:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:47:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RSTAT(r2, &(0x7f0000000140)={0x7c, 0x7d, 0x1, {0x0, 0x75, 0x3ff, 0x1000, {0x0, 0x3, 0x2}, 0x80000, 0x5, 0x2, 0x7ff, 0x1, '{', 0x5, 'sit0\x00', 0x2d, 'eth0/%vboxnet1vboxnet0&systemcpusetvmnet1bdev', 0xf, 'selinux/.bdev,\x00'}}, 0x7c) sendfile(r0, r1, 0x0, 0x802000000020011) lowmem_reserve[]: 0 3505 3505 07:47:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fgetxattr(r1, &(0x7f0000000140)=@random={'security.', 'selinux\x00'}, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) [ 1633.280151] Normal free:9092kB min:5580kB low:9168kB high:12756kB active_anon:879696kB inactive_anon:1821000kB active_file:19636kB inactive_file:85976kB unevictable:16kB writepending:260kB present:4718592kB managed:3589316kB mlocked:16kB slab_reclaimable:27996kB slab_unreclaimable:279552kB kernel_stack:31136kB pagetables:93724kB bounce:0kB free_pcp:996kB local_pcp:648kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1633.280217] DMA32: 2*4kB (UM) 0*8kB 1*16kB (U) 1*32kB (U) 3*64kB (UM) 6*128kB (M) 9*256kB (UM) 4*512kB (M) 4*1024kB (M) 4*2048kB (M) 613*4096kB (UME) = 2528504kB Normal: 131*4kB (ME) 251*8kB (UME) 110*16kB (UME) 75*32kB (UME) 27*64kB (UME) 6*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9188kB 489775 total pagecache pages [ 1633.280272] 0 pages in swap cache [ 1633.280277] Swap cache stats: add 0, delete 0, find 0/0 [ 1633.280279] Free swap = 0kB [ 1633.280282] Total swap = 0kB [ 1633.280284] 1965979 pages RAM [ 1633.280286] 0 pages HighMem/MovableOnly [ 1633.280290] 313617 pages reserved [ 1636.878755] lowmemorykiller: Killing 'syz-executor.1' (20890) (tgid 20890), adj 1000, [ 1636.878755] to free 52476kB on behalf of 'syz-executor.4' (16604) because [ 1636.878755] cache 61420kB is below limit 65536kB for oom_score_adj 12 [ 1636.878755] Free memory is -7948kB above reserved [ 1636.913183] lowmemorykiller: Killing 'syz-executor.4' (10710) (tgid 10710), adj 1000, [ 1636.913183] to free 52440kB on behalf of 'syz-executor.4' (16604) because [ 1636.913183] cache 61220kB is below limit 65536kB for oom_score_adj 12 [ 1636.913183] Free memory is -13164kB above reserved [ 1636.915440] lowmemorykiller: Killing 'syz-executor.1' (18446) (tgid 18446), adj 1000, [ 1636.915440] to free 52428kB on behalf of 'syz-executor.4' (16604) because [ 1636.915440] cache 55620kB is below limit 65536kB for oom_score_adj 12 [ 1636.915440] Free memory is 9236kB above reserved [ 1636.958782] lowmemorykiller: Killing 'syz-executor.1' (20678) (tgid 20678), adj 1000, [ 1636.958782] to free 52428kB on behalf of 'syz-executor.4' (16604) because [ 1636.958782] cache 45620kB is below limit 65536kB for oom_score_adj 12 [ 1636.958782] Free memory is 740kB above reserved [ 1636.970842] lowmemorykiller: Killing 'syz-executor.0' (7201) (tgid 7201), adj 1000, [ 1636.970842] to free 52412kB on behalf of 'kswapd0' (33) because [ 1636.970842] cache 45320kB is below limit 65536kB for oom_score_adj 12 [ 1636.970842] Free memory is -11952kB above reserved [ 1636.972404] lowmemorykiller: Killing 'syz-executor.0' (2834) (tgid 2834), adj 1000, [ 1636.972404] to free 52396kB on behalf of 'kswapd0' (33) because [ 1636.972404] cache 45320kB is below limit 65536kB for oom_score_adj 12 [ 1636.972404] Free memory is -11952kB above reserved [ 1637.000136] lowmemorykiller: Killing 'syz-executor.0' (24011) (tgid 24011), adj 1000, [ 1637.000136] to free 52352kB on behalf of 'kswapd0' (33) because [ 1637.000136] cache 45320kB is below limit 65536kB for oom_score_adj 12 [ 1637.000136] Free memory is -4852kB above reserved [ 1637.001888] lowmemorykiller: Killing 'syz-executor.0' (7153) (tgid 7153), adj 1000, [ 1637.001888] to free 52352kB on behalf of 'kswapd0' (33) because [ 1637.001888] cache 45320kB is below limit 65536kB for oom_score_adj 12 [ 1637.001888] Free memory is 31068kB above reserved [ 1637.008648] lowmemorykiller: Killing 'syz-executor.4' (26585) (tgid 26585), adj 1000, [ 1637.008648] to free 52372kB on behalf of 'syz-executor.4' (16604) because [ 1637.008648] cache 45520kB is below limit 65536kB for oom_score_adj 12 [ 1637.008648] Free memory is -12852kB above reserved [ 1637.036143] lowmemorykiller: Killing 'syz-executor.0' (7175) (tgid 7175), adj 1000, [ 1637.036143] to free 52352kB on behalf of 'syz-executor.4' (16604) because [ 1637.036143] cache 45220kB is below limit 65536kB for oom_score_adj 12 [ 1637.036143] Free memory is 40168kB above reserved [ 1637.054791] lowmemorykiller: Killing 'syz-executor.1' (10737) (tgid 10737), adj 1000, [ 1637.054791] to free 52216kB on behalf of 'kswapd0' (33) because [ 1637.054791] cache 45320kB is below limit 65536kB for oom_score_adj 12 [ 1637.054791] Free memory is 36368kB above reserved [ 1637.056616] lowmemorykiller: Killing 'syz-executor.1' (10756) (tgid 10756), adj 1000, [ 1637.056616] to free 52372kB on behalf of 'kswapd0' (33) because [ 1637.056616] cache 44720kB is below limit 65536kB for oom_score_adj 12 [ 1637.056616] Free memory is 44132kB above reserved [ 1637.065702] lowmemorykiller: Killing 'syz-executor.0' (31794) (tgid 31794), adj 1000, [ 1637.065702] to free 51544kB on behalf of 'kswapd0' (33) because [ 1637.065702] cache 44720kB is below limit 65536kB for oom_score_adj 12 07:48:01 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r1, 0x7fff, 0x18}, 0x31a) ioctl$VT_ACTIVATE(r0, 0x5606, 0x1ff) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1, 0x1000, 0x1, 0x3, 0x8, 0x3, 0x81, 0x7fffffff, 0x0, 0x40, 0x5, 0x1}) creat(&(0x7f0000000040)='./file0\x00', 0xf34080c003ab48a) 07:48:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:01 executing program 4: rt_sigpending(&(0x7f0000000140), 0x8) rt_sigprocmask(0x0, &(0x7f00000000c0)={0x7ff}, &(0x7f0000000100), 0x8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000080)=[{r0, 0x102}, {r0, 0x200}, {r0, 0x408}, {r0, 0x4582}, {r0, 0x1006}, {r0, 0x8}], 0x6, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") listen(r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004e00)=[{0x0, 0x36b, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18}], 0x492492492492556, 0x0) 07:48:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe94, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) [ 1637.065702] Free memory is 44132kB above reserved [ 1637.099912] lowmemorykiller: Killing 'syz-executor.4' (4130) (tgid 4130), adj 1000, [ 1637.099912] to free 51412kB on behalf of 'kswapd0' (33) because [ 1637.099912] cache 44720kB is below limit 65536kB for oom_score_adj 12 [ 1637.099912] Free memory is 44232kB above reserved [ 1637.118632] lowmemorykiller: Killing 'syz-executor.1' (11302) (tgid 11302), adj 1000, [ 1637.118632] to free 51404kB on behalf of 'kswapd0' (33) because [ 1637.118632] cache 44720kB is below limit 65536kB for oom_score_adj 12 [ 1637.118632] Free memory is 45932kB above reserved 07:48:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000040)) r3 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="6166676c6500005607f51100000000000000000000004000007de734e983b276000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x3c) 07:48:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1637.129116] lowmemorykiller: Killing 'syz-executor.0' (30018) (tgid 30018), adj 1000, [ 1637.129116] to free 51396kB on behalf of 'kswapd0' (33) because [ 1637.129116] cache 44720kB is below limit 65536kB for oom_score_adj 12 [ 1637.129116] Free memory is 23732kB above reserved [ 1637.131029] lowmemorykiller: Killing 'syz-executor.2' (8913) (tgid 8913), adj 1000, [ 1637.131029] to free 51392kB on behalf of 'kswapd0' (33) because [ 1637.131029] cache 44720kB is below limit 65536kB for oom_score_adj 12 [ 1637.131029] Free memory is 43308kB above reserved [ 1637.176937] lowmemorykiller: Killing 'syz-executor.2' (8914) (tgid 8914), adj 1000, [ 1637.176937] to free 51392kB on behalf of 'kswapd0' (33) because [ 1637.176937] cache 44720kB is below limit 65536kB for oom_score_adj 12 [ 1637.176937] Free memory is 43308kB above reserved [ 1637.178941] lowmemorykiller: Killing 'syz-executor.1' (5933) (tgid 5933), adj 1000, [ 1637.178941] to free 51388kB on behalf of 'kswapd0' (33) because [ 1637.178941] cache 44720kB is below limit 65536kB for oom_score_adj 12 [ 1637.178941] Free memory is 59652kB above reserved 07:48:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) sendfile(r1, r1, 0x0, 0xcc) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000140)={0x1, 0x8, 0xfffffffffffff9cc, 0x0, 0xe}) 07:48:02 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x4000b) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RSTAT(r2, &(0x7f0000000140)={0x7c, 0x7d, 0x1, {0x0, 0x75, 0x3ff, 0x1000, {0x0, 0x3, 0x2}, 0x80000, 0x5, 0x2, 0x7ff, 0x1, '{', 0x5, 'sit0\x00', 0x2d, 'eth0/%vboxnet1vboxnet0&systemcpusetvmnet1bdev', 0xf, 'selinux/.bdev,\x00'}}, 0x7c) sendfile(r0, r1, 0x0, 0x802000000020011) [ 1637.186013] lowmemorykiller: Killing 'syz-executor.1' (5938) (tgid 5938), adj 1000, [ 1637.186013] to free 51388kB on behalf of 'kswapd0' (33) because [ 1637.186013] cache 44720kB is below limit 65536kB for oom_score_adj 12 [ 1637.186013] Free memory is 59652kB above reserved 07:48:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1637.190509] lowmemorykiller: Killing 'syz-executor.2' (23754) (tgid 23754), adj 1000, [ 1637.190509] to free 51384kB on behalf of 'kswapd0' (33) because [ 1637.190509] cache 44720kB is below limit 65536kB for oom_score_adj 12 [ 1637.190509] Free memory is 61460kB above reserved [ 1637.198586] lowmemorykiller: Killing 'syz-executor.2' (23755) (tgid 23755), adj 1000, [ 1637.198586] to free 51384kB on behalf of 'kswapd0' (33) because [ 1637.198586] cache 44720kB is below limit 65536kB for oom_score_adj 12 [ 1637.198586] Free memory is 61660kB above reserved [ 1637.259294] lowmemorykiller: Killing 'syz-executor.4' (1387) (tgid 1387), adj 1000, [ 1637.259294] to free 51384kB on behalf of 'kswapd0' (33) because [ 1637.259294] cache 43420kB is below limit 65536kB for oom_score_adj 12 [ 1637.259294] Free memory is -12848kB above reserved [ 1637.268587] lowmemorykiller: Killing 'syz-executor.2' (10713) (tgid 10713), adj 1000, [ 1637.268587] to free 51384kB on behalf of 'kswapd0' (33) because [ 1637.268587] cache 43320kB is below limit 65536kB for oom_score_adj 12 [ 1637.268587] Free memory is -13144kB above reserved [ 1637.268612] lowmemorykiller: Killing 'syz-executor.4' (1387) (tgid 1387), adj 1000, [ 1637.268612] to free 51384kB on behalf of 'syz-executor.4' (16604) because [ 1637.268612] cache 43320kB is below limit 65536kB for oom_score_adj 12 [ 1637.268612] Free memory is -13244kB above reserved [ 1637.287178] lowmemorykiller: Killing 'syz-executor.1' (10014) (tgid 10014), adj 1000, [ 1637.287178] to free 51380kB on behalf of 'syz-executor.4' (16604) because [ 1637.287178] cache 43020kB is below limit 65536kB for oom_score_adj 12 [ 1637.287178] Free memory is -12956kB above reserved [ 1637.290122] lowmemorykiller: Killing 'syz-executor.1' (17740) (tgid 17740), adj 1000, [ 1637.290122] to free 51380kB on behalf of 'syz-executor.4' (16604) because [ 1637.290122] cache 42920kB is below limit 65536kB for oom_score_adj 12 [ 1637.290122] Free memory is -13080kB above reserved [ 1637.298593] lowmemorykiller: Killing 'syz-executor.1' (21961) (tgid 21961), adj 1000, [ 1637.298593] to free 51380kB on behalf of 'syz-executor.4' (16604) because [ 1637.298593] cache 42820kB is below limit 65536kB for oom_score_adj 12 [ 1637.298593] Free memory is -12948kB above reserved [ 1637.322964] lowmemorykiller: Killing 'syz-executor.1' (10012) (tgid 10012), adj 1000, [ 1637.322964] to free 51380kB on behalf of 'kswapd0' (33) because [ 1637.322964] cache 43120kB is below limit 65536kB for oom_score_adj 12 [ 1637.322964] Free memory is -11216kB above reserved [ 1637.377872] lowmemorykiller: Killing 'syz-executor.0' (26357) (tgid 26357), adj 1000, [ 1637.377872] to free 51380kB on behalf of 'kswapd0' (33) because [ 1637.377872] cache 42620kB is below limit 65536kB for oom_score_adj 12 [ 1637.377872] Free memory is -13076kB above reserved [ 1637.379002] lowmemorykiller: Killing 'syz-executor.0' (24166) (tgid 24166), adj 1000, [ 1637.379002] to free 51380kB on behalf of 'syz-executor.4' (16604) because [ 1637.379002] cache 42720kB is below limit 65536kB for oom_score_adj 12 [ 1637.379002] Free memory is -13276kB above reserved 07:48:04 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='em0$\'-GPL\x00'}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000000)='netTucp6\x00') preadv(r1, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:48:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0xb9) getsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x196, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'ipddp0\x00', 0x1200}) ftruncate(r1, 0x4000b) sendfile(r0, r1, 0x0, 0x802000000020011) 07:48:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1637.380521] lowmemorykiller: Killing 'syz-executor.0' (26358) (tgid 26358), adj 1000, [ 1637.380521] to free 51380kB on behalf of 'kswapd0' (33) because [ 1637.380521] cache 42420kB is below limit 65536kB for oom_score_adj 12 [ 1637.380521] Free memory is -6764kB above reserved [ 1637.386995] lowmemorykiller: Killing 'syz-executor.0' (26358) (tgid 26358), adj 1000, [ 1637.386995] to free 51380kB on behalf of 'syz-executor.4' (16604) because [ 1637.386995] cache 42420kB is below limit 65536kB for oom_score_adj 12 [ 1637.386995] Free memory is -6564kB above reserved [ 1637.398592] lowmemorykiller: Killing 'syz-executor.1' (2050) (tgid 2050), adj 1000, [ 1637.398592] to free 51380kB on behalf of 'kswapd0' (33) because [ 1637.398592] cache 42420kB is below limit 65536kB for oom_score_adj 12 [ 1637.398592] Free memory is -6564kB above reserved [ 1637.414215] lowmemorykiller: Killing 'syz-executor.5' (23971) (tgid 23971), adj 1000, [ 1637.414215] to free 51368kB on behalf of 'kswapd0' (33) because [ 1637.414215] cache 41920kB is below limit 65536kB for oom_score_adj 12 [ 1637.414215] Free memory is -8028kB above reserved 07:48:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040), 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f31741f447a813d43449d01e9c4e68f5874a5d684809071e6f5beb5fad11c0de418f981439dac8b960befdbd9286cc8155603371c74e502816f766bb9913fc661e16e0eb70527039ad980badcf4ec8827d220a581b9090b13a6bb5943a261ce02bbf58658e778e5200a0b8cc49b66f0965f7e6b589e7156ef059edfd77c5798ee823ea80ce8843922ddd689242a579ba4b3181eef87860ede822fd9218"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) 07:48:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1637.423916] lowmemorykiller: Killing 'syz-executor.1' (2051) (tgid 2051), adj 1000, [ 1637.423916] to free 51380kB on behalf of 'syz-executor.4' (16604) because [ 1637.423916] cache 42220kB is below limit 65536kB for oom_score_adj 12 [ 1637.423916] Free memory is -13228kB above reserved 07:48:05 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x10}}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0x8d, &(0x7f000000cf3d)=""/195}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x401, 0x6, 0x7fffffff, 0x6b1}) 07:48:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='selinux/.bdev,\x00', 0x0) ftruncate(r1, 0x5) prctl$PR_GET_TIMERSLACK(0x1e) sendfile(r0, r1, 0x0, 0x802000000020011) r2 = syz_open_pts(0xffffffffffffffff, 0x40) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) [ 1637.437941] lowmemorykiller: Killing 'syz-executor.1' (8886) (tgid 8886), adj 1000, [ 1637.437941] to free 49884kB on behalf of 'kswapd0' (33) because [ 1637.437941] cache 41920kB is below limit 65536kB for oom_score_adj 12 [ 1637.437941] Free memory is 19840kB above reserved 07:48:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:05 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) capset(0x0, &(0x7f0000000100)={0x0, 0x7fff, 0x6}) sendmmsg(r1, &(0x7f0000000040), 0x400000000000112, 0x0) [ 1637.438333] lowmemorykiller: Killing 'syz-executor.5' (24013) (tgid 24013), adj 1000, [ 1637.438333] to free 49540kB on behalf of 'syz-executor.4' (16604) because [ 1637.438333] cache 41820kB is below limit 65536kB for oom_score_adj 12 [ 1637.438333] Free memory is 39116kB above reserved 07:48:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@local, @in6=@local, 0x4e22, 0x20, 0x4e23, 0x0, 0xa, 0xa0, 0x80, 0x0, r3, r4}, {0x40, 0x0, 0x5, 0x1, 0x1, 0x7, 0x100000000, 0x7fffffff}, {0x93, 0x5, 0x3, 0x2}, 0xdb, 0x6e6bb3, 0x3, 0x0, 0x2, 0x3}, {{@in6=@mcast1, 0x4d5, 0x6c}, 0x2, @in6=@local, 0x0, 0x4, 0x1, 0x100, 0x400, 0xff80000000000000, 0x6}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="76437abd17bcee6107f5110000000000000000000000400000000004b38e000000000000000000a30000000c001f000000060000ba020000800000000d00000080ffffffff0000000000000040f3173930d723b282f6891342b6569cd844a89348a13b2cdcdd611a7fcca4dfe38a88f058cfb84fe36343ad6bfce1fa819edfeeb8d0ac88e95efd36"], 0x1) ptrace$setopts(0x4206, r5, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x3c) [ 1637.468012] lowmemorykiller: Killing 'syz-executor.0' (7456) (tgid 7456), adj 1000, [ 1637.468012] to free 49356kB on behalf of 'kswapd0' (33) because [ 1637.468012] cache 41804kB is below limit 65536kB for oom_score_adj 12 [ 1637.468012] Free memory is -9972kB above reserved 07:48:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r1, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1637.470554] lowmemorykiller: Killing 'syz-executor.2' (2430) (tgid 2430), adj 1000, [ 1637.470554] to free 49340kB on behalf of 'kswapd0' (33) because [ 1637.470554] cache 41704kB is below limit 65536kB for oom_score_adj 12 [ 1637.470554] Free memory is -13120kB above reserved [ 1637.472362] lowmemorykiller: Killing 'syz-executor.4' (4164) (tgid 4164), adj 1000, [ 1637.472362] to free 48044kB on behalf of 'kswapd0' (33) because [ 1637.472362] cache 41604kB is below limit 65536kB for oom_score_adj 12 [ 1637.472362] Free memory is -13020kB above reserved 07:48:06 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8000001040, 0x0) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='personality\x00') chmod(&(0x7f0000000080)='./file0\x00', 0xe) read$FUSE(r0, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x27e, 0x0) 07:48:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) futex(0xffffffffffffffff, 0x87, 0x0, 0x0, 0x0, 0x0) [ 1637.490488] lowmemorykiller: Killing 'syz-executor.0' (4359) (tgid 4359), adj 1000, [ 1637.490488] to free 47436kB on behalf of 'kswapd0' (33) because [ 1637.490488] cache 40604kB is below limit 65536kB for oom_score_adj 12 [ 1637.490488] Free memory is -2520kB above reserved 07:48:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) [ 1637.491848] lowmemorykiller: Killing 'syz-executor.4' (32592) (tgid 32592), adj 1000, [ 1637.491848] to free 47324kB on behalf of 'kswapd0' (33) because [ 1637.491848] cache 40604kB is below limit 65536kB for oom_score_adj 12 [ 1637.491848] Free memory is 8208kB above reserved 07:48:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0) r2 = eventfd(0x7fff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') r5 = perf_event_open(&(0x7f0000000480)={0x7, 0x70, 0x3, 0xfffffffffffffff7, 0x4, 0x6, 0x0, 0x2, 0x20000, 0x5, 0x6, 0xfffffffffffffff7, 0x200, 0xd5, 0x6, 0x0, 0x5, 0xffff, 0xffffffff, 0x9, 0xfffffffffffffffe, 0x6, 0x8000, 0x4, 0x9, 0x7, 0x0, 0x3, 0x2, 0x3, 0x200, 0x6, 0x10001, 0xfffffffffffffffa, 0x0, 0xffffffff, 0x7f, 0x3, 0x0, 0x4, 0x1, @perf_config_ext={0x100000000, 0xe0a3}, 0x10004, 0x9, 0x3, 0x5, 0x8, 0x3, 0x9}, 0x0, 0xd, 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000300)={@initdev, @empty}, &(0x7f0000000340)=0xc) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x100fff, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x42142, 0x0) io_submit(r0, 0x5, &(0x7f0000000680)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f00000000c0)="f601d8cad80eeaf1545752b59eef5603db13", 0x12, 0xcf41, 0x0, 0x3, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x80, r3, &(0x7f0000000140)="70cb439e95e7de002b403bcd37c2d2e6d5ce5dfcaaff3bfde84bc6d59ddb5da621db04ef3a6119e9f216a0d5c4eee14e544c9ab5139de1f200cb912d5b80b6d619bec2d9005aeeb6387703386e0ce4097d481a2df06ad961a3e7438301173218efb88ae967e437045905664d8f251c5030e8667eb5bbe0b90ea78dd6c9bc51a713d39aa52f8dd699936926cbb1aac9dc72d4f565627a7c535effb9dfd1da1f", 0x9f, 0x1, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xf, 0x80000000, r4, &(0x7f0000000280)="5497e2f8dbd09d41074b92488e744facb7c85eff6fde14d3e6ae65b734", 0x1d, 0x4, 0x0, 0x8000000000002}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x1, r5, &(0x7f0000000500)="6bd7e021beefa3d466fd3e05002dbd8f9cc60c6426c11de9ccef40eb9c46c919adeb", 0x22, 0x9, 0x0, 0x3, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x7, r7, &(0x7f00000005c0)="b8466456cae21997af72e6e159f4d37921f16b02", 0x14, 0xae4, 0x0, 0x1, r8}]) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r9, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1637.518767] lowmemorykiller: Killing 'syz-executor.4' (6346) (tgid 6346), adj 1000, [ 1637.518767] to free 46516kB on behalf of 'syz-executor.4' (16604) because [ 1637.518767] cache 40404kB is below limit 65536kB for oom_score_adj 12 [ 1637.518767] Free memory is 24008kB above reserved 07:48:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@local, @in6=@local, 0x4e22, 0x20, 0x4e23, 0x0, 0xa, 0xa0, 0x80, 0x0, r3, r4}, {0x40, 0x0, 0x5, 0x1, 0x1, 0x7, 0x100000000, 0x7fffffff}, {0x93, 0x5, 0x3, 0x2}, 0xdb, 0x6e6bb3, 0x3, 0x0, 0x2, 0x3}, {{@in6=@mcast1, 0x4d5, 0x6c}, 0x2, @in6=@local, 0x0, 0x4, 0x1, 0x100, 0x400, 0xff80000000000000, 0x6}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="76437abd17bcee6107f5110000000000000000000000400000000004b38e000000000000000000a30000000c001f000000060000ba020000800000000d00000080ffffffff0000000000000040f3173930d723b282f6891342b6569cd844a89348a13b2cdcdd611a7fcca4dfe38a88f058cfb84fe36343ad6bfce1fa819edfeeb8d0ac88e95efd36"], 0x1) ptrace$setopts(0x4206, r5, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x3c) 07:48:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1637.578616] lowmemorykiller: Killing 'syz-executor.2' (9452) (tgid 9452), adj 1000, [ 1637.578616] to free 44804kB on behalf of 'kswapd0' (33) because [ 1637.578616] cache 40404kB is below limit 65536kB for oom_score_adj 12 [ 1637.578616] Free memory is -9416kB above reserved [ 1637.589360] lowmemorykiller: Killing 'syz-executor.2' (9455) (tgid 9455), adj 1000, [ 1637.589360] to free 44804kB on behalf of 'kswapd0' (33) because [ 1637.589360] cache 40204kB is below limit 65536kB for oom_score_adj 12 [ 1637.589360] Free memory is -9316kB above reserved 07:48:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x402000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x104, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}}, 0x20008014) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 1637.628658] lowmemorykiller: Killing 'syz-executor.1' (23494) (tgid 23494), adj 1000, [ 1637.628658] to free 44628kB on behalf of 'kswapd0' (33) because [ 1637.628658] cache 40204kB is below limit 65536kB for oom_score_adj 12 [ 1637.628658] Free memory is 184kB above reserved 07:48:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1637.653129] lowmemorykiller: Killing 'syz-executor.0' (550) (tgid 550), adj 1000, [ 1637.653129] to free 42848kB on behalf of 'kswapd0' (33) because [ 1637.653129] cache 39704kB is below limit 65536kB for oom_score_adj 12 [ 1637.653129] Free memory is -12680kB above reserved 07:48:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getpid() r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x7}}, 0x30) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000180)=@in={0x2, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f0000000240)}, 0x0) 07:48:07 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x15f, 0x0, 0xff89}, 0x7ffd}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0xffffffffffffeb4, 0x1f000000) 07:48:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) dup2(r1, r2) tkill(r3, 0x3c) ** 1 printk messages dropped ** [ 1637.659125] lowmemorykiller: Killing 'syz-executor.5' (17862) (tgid 17862), adj 1000, [ 1637.659125] to free 42092kB on behalf of 'syz-executor.4' (16604) because [ 1637.659125] cache 40004kB is below limit 65536kB for oom_score_adj 12 [ 1637.659125] Free memory is -13080kB above reserved [ 1637.667550] lowmemorykiller: Killing 'syz-executor.0' (24178) (tgid 24178), adj 1000, [ 1637.667550] to free 41984kB on behalf of 'kswapd0' (33) because [ 1637.667550] cache 39704kB is below limit 65536kB for oom_score_adj 12 [ 1637.667550] Free memory is -9348kB above reserved [ 1637.688884] lowmemorykiller: Killing 'syz-executor.5' (17436) (tgid 17436), adj 1000, [ 1637.688884] to free 41728kB on behalf of 'kswapd0' (33) because [ 1637.688884] cache 38504kB is below limit 65536kB for oom_score_adj 12 [ 1637.688884] Free memory is -8148kB above reserved 07:48:08 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000100)) preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) sendto(r0, &(0x7f0000000040)="a3a398fbe6de7181afe81cbb3a87d0643f3391cb16a7e76375565011fd888274de2abe5cf3ee3162c58b6278104950bb5863e6b7c9", 0x35, 0x8000, &(0x7f0000000080)=@l2={0x1f, 0x4, {0x80000001, 0x0, 0x800, 0x0, 0x9, 0x5}, 0x9, 0x7ff}, 0x80) 07:48:08 executing program 1: unshare(0x40000000) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) memfd_create(&(0x7f00000000c0)='ip6_vti0\x00', 0x0) r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x800000000002, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/zero\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000b80)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000061c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000006240)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000006340)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000006380)={@empty, 0x0}, &(0x7f00000063c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000006400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000006440)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000006480)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000006580)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f00000065c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006600)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000006640)={{{@in6=@ipv4={[], [], @local}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000006740)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006b80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006b40)={&(0x7f0000006780)=ANY=[@ANYBLOB="9c030000", @ANYRES16=r3, @ANYBLOB="00022abd7000fedbdf250100e4ff07000100", @ANYRES32=r4, @ANYBLOB="3001020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000700000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400800000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000900000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r6, @ANYBLOB="b80002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004005b03000008000100", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040008000000"], 0x39c}, 0x1, 0x0, 0x0, 0x4001}, 0x20008081) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x4}) 07:48:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x883) [ 1637.699640] lowmemorykiller: Killing 'syz-executor.0' (690) (tgid 690), adj 1000, [ 1637.699640] to free 41640kB on behalf of 'kswapd0' (33) because [ 1637.699640] cache 38504kB is below limit 65536kB for oom_score_adj 12 [ 1637.699640] Free memory is 6052kB above reserved [ 1637.727290] lowmemorykiller: Killing 'syz-executor.1' (24184) (tgid 24184), adj 1000, [ 1637.727290] to free 41520kB on behalf of 'kswapd0' (33) because [ 1637.727290] cache 38504kB is below limit 65536kB for oom_score_adj 12 [ 1637.727290] Free memory is 9352kB above reserved [ 1637.739154] lowmemorykiller: Killing 'syz-executor.0' (2829) (tgid 2829), adj 1000, [ 1637.739154] to free 40760kB on behalf of 'kswapd0' (33) because [ 1637.739154] cache 38504kB is below limit 65536kB for oom_score_adj 12 [ 1637.739154] Free memory is -6064kB above reserved 07:48:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1637.741037] lowmemorykiller: Killing 'syz-executor.4' (1413) (tgid 1413), adj 1000, [ 1637.741037] to free 40424kB on behalf of 'kswapd0' (33) because [ 1637.741037] cache 38504kB is below limit 65536kB for oom_score_adj 12 [ 1637.741037] Free memory is 2840kB above reserved 07:48:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000005c0)=0xc) 07:48:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) syz_emit_ethernet(0xb2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/264], &(0x7f0000000000)={0x1, 0x2, [0x71a, 0xbfa, 0x821, 0x5e5]}) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) ioctl$TCSBRK(r2, 0x5409, 0x4) clone(0x4000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) wait4(r3, &(0x7f0000000040), 0x80000008, 0x0) tkill(r3, 0x3c) 07:48:09 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) fchdir(r2) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000440)=0x3) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50}, 0x50) syz_genetlink_get_family_id$team(0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d9189) getcwd(&(0x7f0000000340)=""/168, 0xa8) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="940000001700000126bd7000fcdbdf250100000014c6b00bb44626634b63782a5c23c4fac950f1f7653b6f9867b3cf22f8cf1ce150098267022ac0e1d008458980fcf6fc20d456f5f45ddd4709862380e11f6877745c3ab59efaf00804160807ddfe887fce32d1aaf0266614fd58e4275760525a068495e09fd1d8c81d7fd0e8017fa71c96de0a370462a9830bace6d1f8660000a4b5d57e2f98b820f54723fc0bb9251726a5ec07342f162828f71dd3c5de8e8c9db0ebb58c2b408c5160ab9dc64d98362a18bf5de812e017cb8519683292ff791f9a59c755175325968db2633fff499c5a661e19625ef88725e0c1"], 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x41) r5 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) write$selinux_attr(r5, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1637.774340] lowmemorykiller: Killing 'syz-executor.2' (8642) (tgid 8642), adj 1000, [ 1637.774340] to free 39272kB on behalf of 'kswapd0' (33) because [ 1637.774340] cache 37204kB is below limit 65536kB for oom_score_adj 12 [ 1637.774340] Free memory is -2164kB above reserved [ 1637.783897] lowmemorykiller: Killing 'syz-executor.5' (17839) (tgid 17839), adj 1000, [ 1637.783897] to free 39600kB on behalf of 'syz-executor.4' (16604) because [ 1637.783897] cache 37604kB is below limit 65536kB for oom_score_adj 12 [ 1637.783897] Free memory is -13164kB above reserved 07:48:09 executing program 1: unshare(0x40000000) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) memfd_create(&(0x7f00000000c0)='ip6_vti0\x00', 0x0) r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x800000000002, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/zero\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000b80)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000061c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000006240)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000006340)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000006380)={@empty, 0x0}, &(0x7f00000063c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000006400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000006440)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000006480)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000006580)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f00000065c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006600)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000006640)={{{@in6=@ipv4={[], [], @local}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000006740)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006b80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006b40)={&(0x7f0000006780)=ANY=[@ANYBLOB="9c030000", @ANYRES16=r3, @ANYBLOB="00022abd7000fedbdf250100e4ff07000100", @ANYRES32=r4, @ANYBLOB="3001020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000700000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400800000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000900000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r6, @ANYBLOB="b80002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004005b03000008000100", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040008000000"], 0x39c}, 0x1, 0x0, 0x0, 0x4001}, 0x20008081) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x4}) [ 1637.786065] lowmemorykiller: Killing 'syz-executor.0' (24137) (tgid 24137), adj 1000, [ 1637.786065] to free 38768kB on behalf of 'syz-executor.4' (16604) because [ 1637.786065] cache 37104kB is below limit 65536kB for oom_score_adj 12 [ 1637.786065] Free memory is 4952kB above reserved 07:48:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1637.787566] lowmemorykiller: Killing 'syz-executor.3' (16104) (tgid 16104), adj 1000, [ 1637.787566] to free 38588kB on behalf of 'syz-executor.4' (16604) because [ 1637.787566] cache 37104kB is below limit 65536kB for oom_score_adj 12 [ 1637.787566] Free memory is 6852kB above reserved [ 1637.788639] lowmemorykiller: Killing 'syz-executor.4' (1369) (tgid 1369), adj 1000, [ 1637.788639] to free 38892kB on behalf of 'kswapd0' (33) because [ 1637.788639] cache 37204kB is below limit 65536kB for oom_score_adj 12 [ 1637.788639] Free memory is -2164kB above reserved [ 1637.789864] lowmemorykiller: Killing 'syz-executor.1' (1573) (tgid 1573), adj 1000, [ 1637.789864] to free 38384kB on behalf of 'kswapd0' (33) because [ 1637.789864] cache 37104kB is below limit 65536kB for oom_score_adj 12 [ 1637.789864] Free memory is 4072kB above reserved [ 1637.811108] lowmemorykiller: Killing 'syz-executor.4' (8159) (tgid 8159), adj 1000, [ 1637.811108] to free 38220kB on behalf of 'kswapd0' (33) because [ 1637.811108] cache 37104kB is below limit 65536kB for oom_score_adj 12 [ 1637.811108] Free memory is 7912kB above reserved 07:48:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000005c0)=0xc) ** 6 printk messages dropped ** [ 1637.855505] lowmemorykiller: Killing 'syz-executor.3' (9019) (tgid 9019), adj 1000, [ 1637.855505] to free 36016kB on behalf of 'kswapd0' (33) because [ 1637.855505] cache 36404kB is below limit 65536kB for oom_score_adj 12 [ 1637.855505] Free memory is -10268kB above reserved [ 1637.857250] lowmemorykiller: Killing 'syz-executor.2' (8564) (tgid 8564), adj 1000, [ 1637.857250] to free 36008kB on behalf of 'kswapd0' (33) because [ 1637.857250] cache 36304kB is below limit 65536kB for oom_score_adj 12 [ 1637.857250] Free memory is -9568kB above reserved [ 1637.858848] lowmemorykiller: Killing 'syz-executor.3' (5570) (tgid 5570), adj 1000, [ 1637.858848] to free 36012kB on behalf of 'syz-executor.4' (16604) because [ 1637.858848] cache 36304kB is below limit 65536kB for oom_score_adj 12 [ 1637.858848] Free memory is -9868kB above reserved [ 1637.860046] lowmemorykiller: Killing 'syz-executor.4' (30153) (tgid 30153), adj 1000, [ 1637.860046] to free 36000kB on behalf of 'syz-executor.4' (16604) because [ 1637.860046] cache 36304kB is below limit 65536kB for oom_score_adj 12 [ 1637.860046] Free memory is -9228kB above reserved [ 1637.865776] lowmemorykiller: Killing 'syz-executor.4' (30153) (tgid 30153), adj 1000, [ 1637.865776] to free 36000kB on behalf of 'kswapd0' (33) because [ 1637.865776] cache 36304kB is below limit 65536kB for oom_score_adj 12 [ 1637.865776] Free memory is -9228kB above reserved ** 2 printk messages dropped ** [ 1637.878828] lowmemorykiller: Killing 'syz-executor.5' (8144) (tgid 8144), adj 1000, [ 1637.878828] to free 36000kB on behalf of 'syz-executor.4' (16604) because [ 1637.878828] cache 36304kB is below limit 65536kB for oom_score_adj 12 [ 1637.878828] Free memory is -13092kB above reserved ** 4 printk messages dropped ** [ 1637.925900] lowmemorykiller: Killing 'syz-executor.5' (2735) (tgid 2735), adj 1000, [ 1637.925900] to free 35992kB on behalf of 'syz-executor.4' (16604) because [ 1637.925900] cache 33504kB is below limit 65536kB for oom_score_adj 12 [ 1637.925900] Free memory is -11588kB above reserved [ 1637.928796] lowmemorykiller: Killing 'syz-executor.3' (8826) (tgid 8826), adj 1000, [ 1637.928796] to free 35992kB on behalf of 'kswapd0' (33) because [ 1637.928796] cache 33504kB is below limit 65536kB for oom_score_adj 12 [ 1637.928796] Free memory is -11288kB above reserved [ 1637.930191] lowmemorykiller: Killing 'syz-executor.5' (20096) (tgid 20096), adj 1000, [ 1637.930191] to free 35988kB on behalf of 'kswapd0' (33) because [ 1637.930191] cache 33504kB is below limit 65536kB for oom_score_adj 12 [ 1637.930191] Free memory is -13280kB above reserved [ 1637.931591] lowmemorykiller: Killing 'syz-executor.1' (21581) (tgid 21581), adj 1000, [ 1637.931591] to free 35988kB on behalf of 'kswapd0' (33) because [ 1637.931591] cache 33504kB is below limit 65536kB for oom_score_adj 12 [ 1637.931591] Free memory is -13280kB above reserved [ 1637.938761] lowmemorykiller: Killing 'syz-executor.5' (20096) (tgid 20096), adj 1000, [ 1637.938761] to free 35988kB on behalf of 'syz-executor.4' (16604) because [ 1637.938761] cache 33504kB is below limit 65536kB for oom_score_adj 12 [ 1637.938761] Free memory is -13280kB above reserved [ 1637.940302] lowmemorykiller: Killing 'syz-executor.1' (21739) (tgid 21739), adj 1000, [ 1637.940302] to free 35988kB on behalf of 'syz-executor.4' (16604) because [ 1637.940302] cache 31904kB is below limit 65536kB for oom_score_adj 12 [ 1637.940302] Free memory is -11152kB above reserved [ 1637.942865] lowmemorykiller: Killing 'syz-executor.5' (30598) (tgid 30598), adj 1000, [ 1637.942865] to free 35988kB on behalf of 'syz-executor.4' (16604) because [ 1637.942865] cache 31804kB is below limit 65536kB for oom_score_adj 12 [ 1637.942865] Free memory is -10588kB above reserved [ 1637.956637] lowmemorykiller: Killing 'syz-executor.3' (4422) (tgid 4422), adj 1000, [ 1637.956637] to free 35988kB on behalf of 'kswapd0' (33) because [ 1637.956637] cache 31404kB is below limit 65536kB for oom_score_adj 12 [ 1637.956637] Free memory is -11444kB above reserved [ 1637.957988] lowmemorykiller: Killing 'syz-executor.3' (4788) (tgid 4788), adj 1000, [ 1637.957988] to free 35988kB on behalf of 'kswapd0' (33) because [ 1637.957988] cache 31404kB is below limit 65536kB for oom_score_adj 12 [ 1637.957988] Free memory is -7236kB above reserved [ 1637.962715] lowmemorykiller: Killing 'syz-executor.3' (4778) (tgid 4778), adj 1000, [ 1637.962715] to free 35988kB on behalf of 'syz-executor.4' (16604) because [ 1637.962715] cache 31404kB is below limit 65536kB for oom_score_adj 12 [ 1637.962715] Free memory is -8836kB above reserved [ 1637.968012] lowmemorykiller: Killing 'syz-executor.5' (5659) (tgid 5659), adj 1000, [ 1637.968012] to free 35988kB on behalf of 'kswapd0' (33) because [ 1637.968012] cache 31404kB is below limit 65536kB for oom_score_adj 12 [ 1637.968012] Free memory is -6136kB above reserved [ 1637.972730] lowmemorykiller: Killing 'syz-executor.3' (5816) (tgid 5816), adj 1000, [ 1637.972730] to free 35988kB on behalf of 'syz-executor.4' (16604) because 07:48:12 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0xa80) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r1, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:48:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000001c0)=""/77) gettid() r4 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x01p_files\x00') getdents(r4, &(0x7f0000000080)=""/117, 0x75) getdents(r4, &(0x7f0000000ea9)=""/407, 0x197) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004000000000000000000a3daf3378459c0f303b600000000111f000000060000ba0200008000008e045f2b3b6e791bf2001400000080ffffffff000000000000004000b0"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x100000) wait4(0x0, 0x0, 0x0, 0x0) 07:48:12 executing program 5: socketpair$unix(0x1, 0x10000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000500), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f00000001c0)=0xfffffffffffffffd, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x90000) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 07:48:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:12 executing program 1: unshare(0x40000000) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) memfd_create(&(0x7f00000000c0)='ip6_vti0\x00', 0x0) r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x800000000002, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/zero\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000b80)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000061c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000006240)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000006340)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000006380)={@empty, 0x0}, &(0x7f00000063c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000006400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000006440)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000006480)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000006580)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f00000065c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006600)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000006640)={{{@in6=@ipv4={[], [], @local}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000006740)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006b80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006b40)={&(0x7f0000006780)=ANY=[@ANYBLOB="9c030000", @ANYRES16=r3, @ANYBLOB="00022abd7000fedbdf250100e4ff07000100", @ANYRES32=r4, @ANYBLOB="3001020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000700000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400800000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000900000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r6, @ANYBLOB="b80002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004005b03000008000100", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040008000000"], 0x39c}, 0x1, 0x0, 0x0, 0x4001}, 0x20008081) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x4}) 07:48:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000005c0)=0xc) [ 1637.972730] cache 31304kB is below limit 65536kB for oom_score_adj 12 [ 1637.972730] Free memory is -5424kB above reserved 07:48:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1637.977642] lowmemorykiller: Killing 'syz-executor.5' (6246) (tgid 6246), adj 1000, [ 1637.977642] to free 35988kB on behalf of 'kswapd0' (33) because [ 1637.977642] cache 31304kB is below limit 65536kB for oom_score_adj 12 [ 1637.977642] Free memory is -5120kB above reserved [ 1637.982498] lowmemorykiller: Killing 'syz-executor.3' (8546) (tgid 8546), adj 1000, [ 1637.982498] to free 35988kB on behalf of 'syz-executor.4' (16604) because [ 1637.982498] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1637.982498] Free memory is -2116kB above reserved 07:48:13 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000000c0)={0x5, 0xf20f}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/dev_mcast\x00') preadv(r4, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1637.984074] lowmemorykiller: Killing 'syz-executor.3' (11161) (tgid 11161), adj 1000, [ 1637.984074] to free 35988kB on behalf of 'syz-executor.4' (16604) because [ 1637.984074] cache 31304kB is below limit 65536kB for oom_score_adj 12 [ 1637.984074] Free memory is 5964kB above reserved [ 1637.997249] lowmemorykiller: Killing 'syz-executor.2' (10815) (tgid 10815), adj 1000, [ 1637.997249] to free 35988kB on behalf of 'kswapd0' (33) because [ 1637.997249] cache 31304kB is below limit 65536kB for oom_score_adj 12 [ 1637.997249] Free memory is 2064kB above reserved 07:48:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1637.999799] lowmemorykiller: Killing 'syz-executor.5' (23125) (tgid 23125), adj 1000, [ 1637.999799] to free 35984kB on behalf of 'kswapd0' (33) because [ 1637.999799] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1637.999799] Free memory is 14144kB above reserved 07:48:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1638.001511] lowmemorykiller: Killing 'syz-executor.5' (23399) (tgid 23399), adj 1000, [ 1638.001511] to free 35984kB on behalf of 'kswapd0' (33) because [ 1638.001511] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1638.001511] Free memory is 16244kB above reserved 07:48:14 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1f000000) [ 1638.008609] lowmemorykiller: Killing 'syz-executor.5' (18934) (tgid 18934), adj 1000, [ 1638.008609] to free 35984kB on behalf of 'syz-executor.4' (16604) because [ 1638.008609] cache 31304kB is below limit 65536kB for oom_score_adj 12 [ 1638.008609] Free memory is 7364kB above reserved 07:48:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000005c0)=0xc) [ 1638.038600] lowmemorykiller: Killing 'syz-executor.5' (24152) (tgid 24152), adj 1000, [ 1638.038600] to free 35984kB on behalf of 'kswapd0' (33) because [ 1638.038600] cache 31104kB is below limit 65536kB for oom_score_adj 12 [ 1638.038600] Free memory is 19828kB above reserved [ 1638.046233] lowmemorykiller: Killing 'syz-executor.4' (25410) (tgid 25410), adj 1000, [ 1638.046233] to free 35984kB on behalf of 'kswapd0' (33) because [ 1638.046233] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1638.046233] Free memory is 1264kB above reserved [ 1638.058654] lowmemorykiller: Killing 'syz-executor.3' (6819) (tgid 6819), adj 1000, [ 1638.058654] to free 35984kB on behalf of 'kswapd0' (33) because [ 1638.058654] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1638.058654] Free memory is 9164kB above reserved [ 1638.068849] lowmemorykiller: Killing 'syz-executor.3' (7043) (tgid 7043), adj 1000, [ 1638.068849] to free 35984kB on behalf of 'kswapd0' (33) because [ 1638.068849] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1638.068849] Free memory is 18384kB above reserved [ 1638.078667] lowmemorykiller: Killing 'syz-executor.3' (7119) (tgid 7119), adj 1000, [ 1638.078667] to free 35984kB on behalf of 'kswapd0' (33) because [ 1638.078667] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1638.078667] Free memory is 2864kB above reserved [ 1638.080553] lowmemorykiller: Killing 'syz-executor.3' (7431) (tgid 7431), adj 1000, [ 1638.080553] to free 35984kB on behalf of 'kswapd0' (33) because [ 1638.080553] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1638.080553] Free memory is 6568kB above reserved [ 1638.087653] lowmemorykiller: Killing 'syz-executor.3' (7761) (tgid 7761), adj 1000, [ 1638.087653] to free 35984kB on behalf of 'kswapd0' (33) because [ 1638.087653] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1638.087653] Free memory is 6568kB above reserved [ 1638.109224] lowmemorykiller: Killing 'syz-executor.5' (8430) (tgid 8430), adj 1000, [ 1638.109224] to free 35984kB on behalf of 'kswapd0' (33) because [ 1638.109224] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1638.109224] Free memory is 6568kB above reserved [ 1638.114548] lowmemorykiller: Killing 'syz-executor.5' (8430) (tgid 8430), adj 1000, [ 1638.114548] to free 35984kB on behalf of 'syz-executor.4' (16604) because [ 1638.114548] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1638.114548] Free memory is -13308kB above reserved [ 1638.120006] lowmemorykiller: Killing 'syz-executor.3' (8508) (tgid 8508), adj 1000, [ 1638.120006] to free 35984kB on behalf of 'kswapd0' (33) because [ 1638.120006] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1638.120006] Free memory is -8780kB above reserved [ 1638.125054] lowmemorykiller: Killing 'syz-executor.3' (8690) (tgid 8690), adj 1000, [ 1638.125054] to free 35984kB on behalf of 'syz-executor.4' (16604) because [ 1638.125054] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1638.125054] Free memory is -8500kB above reserved [ 1638.132332] lowmemorykiller: Killing 'syz-executor.0' (14302) (tgid 14302), adj 1000, [ 1638.132332] to free 35984kB on behalf of 'kswapd0' (33) because [ 1638.132332] cache 31204kB is below limit 65536kB for oom_score_adj 12 [ 1638.132332] Free memory is -8300kB above reserved [ 1638.137092] lowmemorykiller: Killing 'syz-executor.4' (14627) (tgid 14627), adj 1000, [ 1638.137092] to free 35984kB on behalf of 'syz-executor.4' (16604) because [ 1638.137092] cache 31104kB is below limit 65536kB for oom_score_adj 12 [ 1638.137092] Free memory is -7900kB above reserved [ 1638.138632] lowmemorykiller: Killing 'syz-executor.5' (15433) (tgid 15433), adj 1000, [ 1638.138632] to free 35984kB on behalf of 'kswapd0' (33) because [ 1638.138632] cache 31104kB is below limit 65536kB for oom_score_adj 12 [ 1638.138632] Free memory is -7500kB above reserved [ 1638.140164] lowmemorykiller: Killing 'syz-executor.0' (10265) (tgid 10265), adj 1000, [ 1638.140164] to free 35980kB on behalf of 'kswapd0' (33) because [ 1638.140164] cache 31104kB is below limit 65536kB for oom_score_adj 12 [ 1638.140164] Free memory is -7200kB above reserved [ 1638.149109] lowmemorykiller: Killing 'syz-executor.0' (10265) (tgid 10265), adj 1000, [ 1638.149109] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.149109] cache 31104kB is below limit 65536kB for oom_score_adj 12 [ 1638.149109] Free memory is -7200kB above reserved [ 1638.167516] lowmemorykiller: Killing 'syz-executor.5' (11007) (tgid 11007), adj 1000, [ 1638.167516] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.167516] cache 28704kB is below limit 65536kB for oom_score_adj 12 [ 1638.167516] Free memory is -700kB above reserved [ 1638.188645] lowmemorykiller: Killing 'syz-executor.4' (19424) (tgid 19424), adj 1000, [ 1638.188645] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.188645] cache 28604kB is below limit 65536kB for oom_score_adj 12 [ 1638.188645] Free memory is 1700kB above reserved [ 1638.193861] lowmemorykiller: Killing 'syz-executor.5' (20128) (tgid 20128), adj 1000, [ 1638.193861] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.193861] cache 28604kB is below limit 65536kB for oom_score_adj 12 [ 1638.193861] Free memory is 12408kB above reserved [ 1638.204022] lowmemorykiller: Killing 'syz-executor.1' (21704) (tgid 21704), adj 1000, [ 1638.204022] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.204022] cache 28604kB is below limit 65536kB for oom_score_adj 12 [ 1638.204022] Free memory is -13284kB above reserved [ 1638.279131] lowmemorykiller: Killing 'syz-executor.1' (22313) (tgid 22313), adj 1000, [ 1638.279131] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.279131] cache 28304kB is below limit 65536kB for oom_score_adj 12 [ 1638.279131] Free memory is 3944kB above reserved [ 1638.309045] lowmemorykiller: Killing 'syz-executor.1' (24507) (tgid 24507), adj 1000, [ 1638.309045] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.309045] cache 28204kB is below limit 65536kB for oom_score_adj 12 [ 1638.309045] Free memory is -13280kB above reserved [ 1638.312726] lowmemorykiller: Killing 'syz-executor.1' (30300) (tgid 30300), adj 1000, [ 1638.312726] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.312726] cache 28204kB is below limit 65536kB for oom_score_adj 12 [ 1638.312726] Free memory is -13080kB above reserved [ 1638.335526] lowmemorykiller: Killing 'syz-executor.1' (30324) (tgid 30324), adj 1000, [ 1638.335526] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.335526] cache 28104kB is below limit 65536kB for oom_score_adj 12 [ 1638.335526] Free memory is -7080kB above reserved [ 1638.347975] lowmemorykiller: Killing 'syz-executor.3' (31254) (tgid 31254), adj 1000, [ 1638.347975] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.347975] cache 28004kB is below limit 65536kB for oom_score_adj 12 [ 1638.347975] Free memory is -6680kB above reserved [ 1638.387711] lowmemorykiller: Killing 'syz-executor.3' (31273) (tgid 31273), adj 1000, [ 1638.387711] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.387711] cache 27704kB is below limit 65536kB for oom_score_adj 12 [ 1638.387711] Free memory is -3380kB above reserved [ 1638.410441] lowmemorykiller: Killing 'syz-executor.5' (6001) (tgid 6001), adj 1000, [ 1638.410441] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.410441] cache 27704kB is below limit 65536kB for oom_score_adj 12 [ 1638.410441] Free memory is -3380kB above reserved [ 1638.420963] lowmemorykiller: Killing 'syz-executor.5' (6225) (tgid 6225), adj 1000, [ 1638.420963] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.420963] cache 26904kB is below limit 65536kB for oom_score_adj 12 [ 1638.420963] Free memory is -13260kB above reserved [ 1638.422677] lowmemorykiller: Killing 'syz-executor.5' (8017) (tgid 8017), adj 1000, [ 1638.422677] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.422677] cache 26972kB is below limit 65536kB for oom_score_adj 12 [ 1638.422677] Free memory is -12808kB above reserved [ 1638.425537] lowmemorykiller: Killing 'syz-executor.5' (8519) (tgid 8519), adj 1000, [ 1638.425537] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.425537] cache 26872kB is below limit 65536kB for oom_score_adj 12 [ 1638.425537] Free memory is -12708kB above reserved [ 1638.427124] lowmemorykiller: Killing 'syz-executor.5' (8798) (tgid 8798), adj 1000, [ 1638.427124] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.427124] cache 26772kB is below limit 65536kB for oom_score_adj 12 [ 1638.427124] Free memory is -12608kB above reserved [ 1638.431232] lowmemorykiller: Killing 'syz-executor.5' (9673) (tgid 9673), adj 1000, [ 1638.431232] to free 35980kB on behalf of 'kswapd0' (33) because [ 1638.431232] cache 26772kB is below limit 65536kB for oom_score_adj 12 [ 1638.431232] Free memory is -12532kB above reserved [ 1638.432286] lowmemorykiller: Killing 'syz-executor.3' (9891) (tgid 9891), adj 1000, [ 1638.432286] to free 35980kB on behalf of 'kswapd0' (33) because [ 1638.432286] cache 26772kB is below limit 65536kB for oom_score_adj 12 [ 1638.432286] Free memory is -12532kB above reserved [ 1638.434933] lowmemorykiller: Killing 'syz-executor.3' (9913) (tgid 9913), adj 1000, [ 1638.434933] to free 35980kB on behalf of 'kswapd0' (33) because [ 1638.434933] cache 26772kB is below limit 65536kB for oom_score_adj 12 [ 1638.434933] Free memory is -12432kB above reserved [ 1638.443089] lowmemorykiller: Killing 'syz-executor.0' (16529) (tgid 16529), adj 1000, [ 1638.443089] to free 35980kB on behalf of 'syz-executor.4' (16604) because [ 1638.443089] cache 26772kB is below limit 65536kB for oom_score_adj 12 [ 1638.443089] Free memory is -12532kB above reserved [ 1638.445919] lowmemorykiller: Killing 'syz-executor.5' (13744) (tgid 13744), adj 1000, [ 1638.445919] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.445919] cache 26772kB is below limit 65536kB for oom_score_adj 12 [ 1638.445919] Free memory is -13324kB above reserved [ 1638.451637] lowmemorykiller: Killing 'syz-executor.5' (18971) (tgid 18971), adj 1000, [ 1638.451637] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.451637] cache 26372kB is below limit 65536kB for oom_score_adj 12 [ 1638.451637] Free memory is -13124kB above reserved [ 1638.468608] lowmemorykiller: Killing 'syz-executor.3' (11195) (tgid 11195), adj 1000, [ 1638.468608] to free 35980kB on behalf of 'kswapd0' (33) because [ 1638.468608] cache 26772kB is below limit 65536kB for oom_score_adj 12 [ 1638.468608] Free memory is -12452kB above reserved [ 1638.475082] lowmemorykiller: Killing 'syz-executor.4' (19523) (tgid 19523), adj 1000, [ 1638.475082] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.475082] cache 26172kB is below limit 65536kB for oom_score_adj 12 [ 1638.475082] Free memory is 4176kB above reserved [ 1638.481006] lowmemorykiller: Killing 'syz-executor.4' (19591) (tgid 19591), adj 1000, [ 1638.481006] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.481006] cache 26172kB is below limit 65536kB for oom_score_adj 12 [ 1638.481006] Free memory is 4476kB above reserved [ 1638.495331] lowmemorykiller: Killing 'syz-executor.4' (19481) (tgid 19481), adj 1000, [ 1638.495331] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.495331] cache 26172kB is below limit 65536kB for oom_score_adj 12 [ 1638.495331] Free memory is -12724kB above reserved [ 1638.498662] lowmemorykiller: Killing 'syz-executor.2' (22897) (tgid 22897), adj 1000, [ 1638.498662] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.498662] cache 26172kB is below limit 65536kB for oom_score_adj 12 [ 1638.498662] Free memory is 4796kB above reserved [ 1638.508597] lowmemorykiller: Killing 'syz-executor.4' (24140) (tgid 24140), adj 1000, [ 1638.508597] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.508597] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.508597] Free memory is 22240kB above reserved [ 1638.508636] lowmemorykiller: Killing 'syz-executor.4' (23256) (tgid 23256), adj 1000, [ 1638.508636] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.508636] cache 26172kB is below limit 65536kB for oom_score_adj 12 [ 1638.508636] Free memory is 19296kB above reserved [ 1638.510373] lowmemorykiller: Killing 'syz-executor.0' (24980) (tgid 24980), adj 1000, [ 1638.510373] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.510373] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.510373] Free memory is 32416kB above reserved [ 1638.513482] lowmemorykiller: Killing 'syz-executor.0' (24980) (tgid 24980), adj 1000, [ 1638.513482] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.513482] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.513482] Free memory is 32416kB above reserved [ 1638.516357] lowmemorykiller: Killing 'syz-executor.4' (25213) (tgid 25213), adj 1000, [ 1638.516357] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.516357] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.516357] Free memory is 32416kB above reserved [ 1638.528599] lowmemorykiller: Killing 'syz-executor.5' (29363) (tgid 29363), adj 1000, [ 1638.528599] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.528599] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.528599] Free memory is 23956kB above reserved [ 1638.533984] lowmemorykiller: Killing 'syz-executor.0' (30053) (tgid 30053), adj 1000, [ 1638.533984] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.533984] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.533984] Free memory is 20920kB above reserved [ 1638.544940] lowmemorykiller: Killing 'syz-executor.1' (30372) (tgid 30372), adj 1000, [ 1638.544940] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.544940] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.544940] Free memory is 24740kB above reserved [ 1638.546763] lowmemorykiller: Killing 'syz-executor.1' (30392) (tgid 30392), adj 1000, [ 1638.546763] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.546763] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.546763] Free memory is 16536kB above reserved [ 1638.554759] lowmemorykiller: Killing 'syz-executor.5' (911) (tgid 911), adj 1000, [ 1638.554759] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.554759] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.554759] Free memory is 10088kB above reserved [ 1638.560376] lowmemorykiller: Killing 'syz-executor.4' (1540) (tgid 1540), adj 1000, [ 1638.560376] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.560376] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.560376] Free memory is 11744kB above reserved [ 1638.565352] lowmemorykiller: Killing 'syz-executor.3' (3956) (tgid 3956), adj 1000, [ 1638.565352] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.565352] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.565352] Free memory is 12644kB above reserved [ 1638.577200] lowmemorykiller: Killing 'syz-executor.1' (4468) (tgid 4468), adj 1000, [ 1638.577200] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.577200] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.577200] Free memory is -13224kB above reserved [ 1638.580310] lowmemorykiller: Killing 'syz-executor.0' (4118) (tgid 4118), adj 1000, [ 1638.580310] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.580310] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.580310] Free memory is 9416kB above reserved [ 1638.589006] lowmemorykiller: Killing 'syz-executor.3' (4566) (tgid 4566), adj 1000, [ 1638.589006] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.589006] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.589006] Free memory is -11296kB above reserved [ 1638.594505] lowmemorykiller: Killing 'syz-executor.3' (5728) (tgid 5728), adj 1000, [ 1638.594505] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.594505] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.594505] Free memory is -8008kB above reserved [ 1638.598498] lowmemorykiller: Killing 'syz-executor.3' (4566) (tgid 4566), adj 1000, [ 1638.598498] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.598498] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.598498] Free memory is -11624kB above reserved [ 1638.600242] lowmemorykiller: Killing 'syz-executor.3' (7479) (tgid 7479), adj 1000, [ 1638.600242] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.600242] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.600242] Free memory is -7628kB above reserved [ 1638.603366] lowmemorykiller: Killing 'syz-executor.3' (6455) (tgid 6455), adj 1000, [ 1638.603366] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.603366] cache 26200kB is below limit 65536kB for oom_score_adj 12 [ 1638.603366] Free memory is -7728kB above reserved [ 1638.604707] lowmemorykiller: Killing 'syz-executor.2' (9025) (tgid 9025), adj 1000, [ 1638.604707] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.604707] cache 26100kB is below limit 65536kB for oom_score_adj 12 [ 1638.604707] Free memory is -6028kB above reserved [ 1638.618601] lowmemorykiller: Killing 'syz-executor.4' (9015) (tgid 9015), adj 1000, [ 1638.618601] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.618601] cache 26100kB is below limit 65536kB for oom_score_adj 12 [ 1638.618601] Free memory is -6428kB above reserved [ 1638.623535] lowmemorykiller: Killing 'syz-executor.0' (9692) (tgid 9692), adj 1000, [ 1638.623535] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.623535] cache 26100kB is below limit 65536kB for oom_score_adj 12 [ 1638.623535] Free memory is -6028kB above reserved [ 1638.625171] lowmemorykiller: Killing 'syz-executor.0' (10193) (tgid 10193), adj 1000, [ 1638.625171] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.625171] cache 26100kB is below limit 65536kB for oom_score_adj 12 [ 1638.625171] Free memory is 1612kB above reserved [ 1638.628612] lowmemorykiller: Killing 'syz-executor.0' (10129) (tgid 10129), adj 1000, [ 1638.628612] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.628612] cache 26100kB is below limit 65536kB for oom_score_adj 12 [ 1638.628612] Free memory is 1312kB above reserved [ 1638.645957] lowmemorykiller: Killing 'syz-executor.0' (10241) (tgid 10241), adj 1000, [ 1638.645957] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.645957] cache 26000kB is below limit 65536kB for oom_score_adj 12 [ 1638.645957] Free memory is -13332kB above reserved [ 1638.652794] lowmemorykiller: Killing 'syz-executor.1' (10874) (tgid 10874), adj 1000, [ 1638.652794] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.652794] cache 26000kB is below limit 65536kB for oom_score_adj 12 [ 1638.652794] Free memory is -13332kB above reserved [ 1638.654598] lowmemorykiller: Killing 'syz-executor.1' (11648) (tgid 11648), adj 1000, [ 1638.654598] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.654598] cache 26000kB is below limit 65536kB for oom_score_adj 12 [ 1638.654598] Free memory is -11932kB above reserved [ 1638.661711] lowmemorykiller: Killing 'syz-executor.0' (13625) (tgid 13625), adj 1000, [ 1638.661711] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.661711] cache 26000kB is below limit 65536kB for oom_score_adj 12 [ 1638.661711] Free memory is -13232kB above reserved [ 1638.668631] lowmemorykiller: Killing 'syz-executor.0' (13591) (tgid 13591), adj 1000, [ 1638.668631] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.668631] cache 25800kB is below limit 65536kB for oom_score_adj 12 [ 1638.668631] Free memory is -11532kB above reserved [ 1638.676929] lowmemorykiller: Killing 'syz-executor.0' (13669) (tgid 13669), adj 1000, [ 1638.676929] to free 35976kB on behalf of 'syz-executor.4' (16604) because [ 1638.676929] cache 25800kB is below limit 65536kB for oom_score_adj 12 [ 1638.676929] Free memory is -13356kB above reserved [ 1638.681305] lowmemorykiller: Killing 'syz-executor.0' (9987) (tgid 9987), adj 1000, [ 1638.681305] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.681305] cache 25800kB is below limit 65536kB for oom_score_adj 12 [ 1638.681305] Free memory is -12956kB above reserved [ 1638.682982] lowmemorykiller: Killing 'syz-executor.3' (10955) (tgid 10955), adj 1000, [ 1638.682982] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.682982] cache 25800kB is below limit 65536kB for oom_score_adj 12 [ 1638.682982] Free memory is -12256kB above reserved [ 1638.688615] lowmemorykiller: Killing 'syz-executor.0' (14783) (tgid 14783), adj 1000, [ 1638.688615] to free 35976kB on behalf of 'kswapd0' (33) because [ 1638.688615] cache 25800kB is below limit 65536kB for oom_score_adj 12 [ 1638.688615] Free memory is -10380kB above reserved [ 1638.693008] lowmemorykiller: Killing 'syz-executor.3' (10966) (tgid 10966), adj 1000, [ 1638.693008] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.693008] cache 25300kB is below limit 65536kB for oom_score_adj 12 [ 1638.693008] Free memory is -12988kB above reserved [ 1638.697365] lowmemorykiller: Killing 'syz-executor.2' (11441) (tgid 11441), adj 1000, [ 1638.697365] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.697365] cache 25300kB is below limit 65536kB for oom_score_adj 12 [ 1638.697365] Free memory is -12688kB above reserved [ 1638.699256] lowmemorykiller: Killing 'syz-executor.1' (22615) (tgid 22615), adj 1000, [ 1638.699256] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.699256] cache 25300kB is below limit 65536kB for oom_score_adj 12 [ 1638.699256] Free memory is -12388kB above reserved [ 1638.707086] lowmemorykiller: Killing 'syz-executor.4' (23342) (tgid 23342), adj 1000, [ 1638.707086] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.707086] cache 25300kB is below limit 65536kB for oom_score_adj 12 [ 1638.707086] Free memory is -12388kB above reserved [ 1638.709523] lowmemorykiller: Killing 'syz-executor.3' (10966) (tgid 10966), adj 1000, [ 1638.709523] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.709523] cache 25300kB is below limit 65536kB for oom_score_adj 12 [ 1638.709523] Free memory is -12988kB above reserved [ 1638.720217] lowmemorykiller: Killing 'syz-executor.5' (31470) (tgid 31470), adj 1000, [ 1638.720217] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.720217] cache 24900kB is below limit 65536kB for oom_score_adj 12 [ 1638.720217] Free memory is -13104kB above reserved [ 1638.725754] lowmemorykiller: Killing 'syz-executor.4' (1340) (tgid 1340), adj 1000, [ 1638.725754] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.725754] cache 24900kB is below limit 65536kB for oom_score_adj 12 [ 1638.725754] Free memory is -13112kB above reserved [ 1638.730585] lowmemorykiller: Killing 'syz-executor.5' (1873) (tgid 1873), adj 1000, [ 1638.730585] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.730585] cache 24900kB is below limit 65536kB for oom_score_adj 12 [ 1638.730585] Free memory is -12912kB above reserved [ 1638.747973] lowmemorykiller: Killing 'syz-executor.5' (2489) (tgid 2489), adj 1000, [ 1638.747973] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.747973] cache 24900kB is below limit 65536kB for oom_score_adj 12 [ 1638.747973] Free memory is -10280kB above reserved [ 1638.763432] lowmemorykiller: Killing 'syz-executor.5' (3298) (tgid 3298), adj 1000, [ 1638.763432] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.763432] cache 25000kB is below limit 65536kB for oom_score_adj 12 [ 1638.763432] Free memory is 628kB above reserved [ 1638.769053] lowmemorykiller: Killing 'syz-executor.5' (2177) (tgid 2177), adj 1000, [ 1638.769053] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.769053] cache 25000kB is below limit 65536kB for oom_score_adj 12 [ 1638.769053] Free memory is -4272kB above reserved [ 1638.774284] lowmemorykiller: Killing 'syz-executor.5' (3755) (tgid 3755), adj 1000, [ 1638.774284] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.774284] cache 25100kB is below limit 65536kB for oom_score_adj 12 [ 1638.774284] Free memory is 12728kB above reserved [ 1638.780631] lowmemorykiller: Killing 'syz-executor.5' (3802) (tgid 3802), adj 1000, [ 1638.780631] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.780631] cache 25100kB is below limit 65536kB for oom_score_adj 12 [ 1638.780631] Free memory is 13328kB above reserved [ 1638.786206] lowmemorykiller: Killing 'syz-executor.5' (4113) (tgid 4113), adj 1000, [ 1638.786206] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.786206] cache 25200kB is below limit 65536kB for oom_score_adj 12 [ 1638.786206] Free memory is 17944kB above reserved [ 1638.788052] lowmemorykiller: Killing 'syz-executor.5' (5061) (tgid 5061), adj 1000, [ 1638.788052] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.788052] cache 25248kB is below limit 65536kB for oom_score_adj 12 [ 1638.788052] Free memory is 21872kB above reserved [ 1638.789704] lowmemorykiller: Killing 'syz-executor.3' (5527) (tgid 5527), adj 1000, [ 1638.789704] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.789704] cache 25248kB is below limit 65536kB for oom_score_adj 12 [ 1638.789704] Free memory is 21872kB above reserved [ 1638.792339] lowmemorykiller: Killing 'syz-executor.5' (7167) (tgid 7167), adj 1000, [ 1638.792339] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.792339] cache 25248kB is below limit 65536kB for oom_score_adj 12 [ 1638.792339] Free memory is 21948kB above reserved [ 1638.793454] lowmemorykiller: Killing 'syz-executor.4' (4751) (tgid 4751), adj 1000, [ 1638.793454] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.793454] cache 25100kB is below limit 65536kB for oom_score_adj 12 [ 1638.793454] Free memory is 21572kB above reserved [ 1638.810324] lowmemorykiller: Killing 'syz-executor.5' (7720) (tgid 7720), adj 1000, [ 1638.810324] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.810324] cache 25248kB is below limit 65536kB for oom_score_adj 12 [ 1638.810324] Free memory is 22028kB above reserved [ 1638.812051] lowmemorykiller: Killing 'syz-executor.5' (7736) (tgid 7736), adj 1000, [ 1638.812051] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.812051] cache 25296kB is below limit 65536kB for oom_score_adj 12 [ 1638.812051] Free memory is -12348kB above reserved [ 1638.816655] lowmemorykiller: Killing 'syz-executor.5' (9442) (tgid 9442), adj 1000, [ 1638.816655] to free 35972kB on behalf of 'kswapd0' (33) because [ 1638.816655] cache 25296kB is below limit 65536kB for oom_score_adj 12 [ 1638.816655] Free memory is -12348kB above reserved [ 1638.821036] lowmemorykiller: Killing 'syz-executor.1' (9534) (tgid 9534), adj 1000, [ 1638.821036] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.821036] cache 25196kB is below limit 65536kB for oom_score_adj 12 [ 1638.821036] Free memory is -13308kB above reserved [ 1638.825364] lowmemorykiller: Killing 'syz-executor.1' (9547) (tgid 9547), adj 1000, [ 1638.825364] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.825364] cache 25196kB is below limit 65536kB for oom_score_adj 12 [ 1638.825364] Free memory is -13208kB above reserved [ 1638.838612] lowmemorykiller: Killing 'syz-executor.0' (10391) (tgid 10391), adj 1000, [ 1638.838612] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.838612] cache 25196kB is below limit 65536kB for oom_score_adj 12 [ 1638.838612] Free memory is -12504kB above reserved [ 1638.843853] lowmemorykiller: Killing 'syz-executor.3' (11294) (tgid 11294), adj 1000, [ 1638.843853] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.843853] cache 21396kB is below limit 65536kB for oom_score_adj 12 [ 1638.843853] Free memory is -8124kB above reserved [ 1638.846043] lowmemorykiller: Killing 'syz-executor.3' (11373) (tgid 11373), adj 1000, [ 1638.846043] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.846043] cache 21444kB is below limit 65536kB for oom_score_adj 12 [ 1638.846043] Free memory is -7800kB above reserved [ 1638.849080] lowmemorykiller: Killing 'syz-executor.0' (12819) (tgid 12819), adj 1000, [ 1638.849080] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.849080] cache 21444kB is below limit 65536kB for oom_score_adj 12 [ 1638.849080] Free memory is -7800kB above reserved [ 1638.868622] lowmemorykiller: Killing 'syz-executor.0' (12855) (tgid 12855), adj 1000, [ 1638.868622] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.868622] cache 21444kB is below limit 65536kB for oom_score_adj 12 [ 1638.868622] Free memory is -13328kB above reserved [ 1638.874589] lowmemorykiller: Killing 'syz-executor.4' (14459) (tgid 14459), adj 1000, [ 1638.874589] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.874589] cache 21444kB is below limit 65536kB for oom_score_adj 12 [ 1638.874589] Free memory is -12368kB above reserved [ 1638.880316] lowmemorykiller: Killing 'syz-executor.4' (16041) (tgid 16041), adj 1000, [ 1638.880316] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.880316] cache 21444kB is below limit 65536kB for oom_score_adj 12 [ 1638.880316] Free memory is -12060kB above reserved [ 1638.886444] lowmemorykiller: Killing 'syz-executor.4' (16546) (tgid 16546), adj 1000, [ 1638.886444] to free 35972kB on behalf of 'syz-executor.4' (16604) because [ 1638.886444] cache 21444kB is below limit 65536kB for oom_score_adj 12 [ 1638.886444] Free memory is -11660kB above reserved [ 1638.888169] lowmemorykiller: Killing 'syz-executor.0' (10242) (tgid 10242), adj 1000, [ 1638.888169] to free 35968kB on behalf of 'syz-executor.4' (16604) because [ 1638.888169] cache 21444kB is below limit 65536kB for oom_score_adj 12 [ 1638.888169] Free memory is -11460kB above reserved [ 1638.895332] lowmemorykiller: Killing 'syz-executor.1' (10825) (tgid 10825), adj 1000, [ 1638.895332] to free 35968kB on behalf of 'syz-executor.4' (16604) because [ 1638.895332] cache 21144kB is below limit 65536kB for oom_score_adj 12 [ 1638.895332] Free memory is -13160kB above reserved [ 1638.913803] lowmemorykiller: Killing 'syz-executor.5' (12993) (tgid 12993), adj 1000, [ 1638.913803] to free 35968kB on behalf of 'kswapd0' (33) because [ 1638.913803] cache 16392kB is below limit 65536kB for oom_score_adj 12 [ 1638.913803] Free memory is 164kB above reserved [ 1638.938609] lowmemorykiller: Killing 'syz-executor.5' (18915) (tgid 18915), adj 1000, [ 1638.938609] to free 35968kB on behalf of 'kswapd0' (33) because [ 1638.938609] cache 16392kB is below limit 65536kB for oom_score_adj 12 [ 1638.938609] Free memory is 1864kB above reserved [ 1638.944946] lowmemorykiller: Killing 'syz-executor.4' (19870) (tgid 19870), adj 1000, [ 1638.944946] to free 35968kB on behalf of 'kswapd0' (33) because [ 1638.944946] cache 16492kB is below limit 65536kB for oom_score_adj 12 [ 1638.944946] Free memory is -12312kB above reserved [ 1638.955193] lowmemorykiller: Killing 'syz-executor.3' (20394) (tgid 20394), adj 1000, [ 1638.955193] to free 35968kB on behalf of 'kswapd0' (33) because [ 1638.955193] cache 16492kB is below limit 65536kB for oom_score_adj 12 [ 1638.955193] Free memory is -12112kB above reserved [ 1638.956903] lowmemorykiller: Killing 'syz-executor.1' (20396) (tgid 20396), adj 1000, [ 1638.956903] to free 35968kB on behalf of 'kswapd0' (33) because [ 1638.956903] cache 16492kB is below limit 65536kB for oom_score_adj 12 [ 1638.956903] Free memory is -11812kB above reserved [ 1638.964627] lowmemorykiller: Killing 'syz-executor.1' (21782) (tgid 21782), adj 1000, [ 1638.964627] to free 35968kB on behalf of 'kswapd0' (33) because [ 1638.964627] cache 16492kB is below limit 65536kB for oom_score_adj 12 [ 1638.964627] Free memory is -11812kB above reserved [ 1638.985715] lowmemorykiller: Killing 'syz-executor.4' (22430) (tgid 22430), adj 1000, [ 1638.985715] to free 35968kB on behalf of 'syz-executor.4' (16604) because [ 1638.985715] cache 16640kB is below limit 65536kB for oom_score_adj 12 [ 1638.985715] Free memory is -13252kB above reserved [ 1638.998610] lowmemorykiller: Killing 'syz-executor.2' (22888) (tgid 22888), adj 1000, [ 1638.998610] to free 35968kB on behalf of 'syz-executor.4' (16604) because [ 1638.998610] cache 16640kB is below limit 65536kB for oom_score_adj 12 [ 1638.998610] Free memory is 3376kB above reserved [ 1639.005379] lowmemorykiller: Killing 'syz-executor.5' (28999) (tgid 28999), adj 1000, [ 1639.005379] to free 35968kB on behalf of 'kswapd0' (33) because [ 1639.005379] cache 16492kB is below limit 65536kB for oom_score_adj 12 [ 1639.005379] Free memory is -11812kB above reserved [ 1639.008612] lowmemorykiller: Killing 'syz-executor.1' (26549) (tgid 26549), adj 1000, [ 1639.008612] to free 35968kB on behalf of 'syz-executor.4' (16604) because [ 1639.008612] cache 16540kB is below limit 65536kB for oom_score_adj 12 [ 1639.008612] Free memory is 12676kB above reserved [ 1639.010873] lowmemorykiller: Killing 'syz-executor.0' (30691) (tgid 30691), adj 1000, [ 1639.010873] to free 35968kB on behalf of 'syz-executor.4' (16604) because [ 1639.010873] cache 16440kB is below limit 65536kB for oom_score_adj 12 [ 1639.010873] Free memory is 15388kB above reserved [ 1639.026565] lowmemorykiller: Killing 'syz-executor.5' (410) (tgid 410), adj 1000, [ 1639.026565] to free 35968kB on behalf of 'kswapd0' (33) because [ 1639.026565] cache 16640kB is below limit 65536kB for oom_score_adj 12 [ 1639.026565] Free memory is 15288kB above reserved [ 1639.031680] lowmemorykiller: Killing 'syz-executor.3' (2029) (tgid 2029), adj 1000, [ 1639.031680] to free 35968kB on behalf of 'kswapd0' (33) because [ 1639.031680] cache 16588kB is below limit 65536kB for oom_score_adj 12 [ 1639.031680] Free memory is 2508kB above reserved [ 1639.048452] lowmemorykiller: Killing 'syz-executor.3' (2138) (tgid 2138), adj 1000, [ 1639.048452] to free 35968kB on behalf of 'syz-executor.4' (16604) because [ 1639.048452] cache 16488kB is below limit 65536kB for oom_score_adj 12 [ 1639.048452] Free memory is -13252kB above reserved [ 1639.051109] lowmemorykiller: Killing 'syz-executor.3' (2089) (tgid 2089), adj 1000, [ 1639.051109] to free 35968kB on behalf of 'kswapd0' (33) because [ 1639.051109] cache 16588kB is below limit 65536kB for oom_score_adj 12 [ 1639.051109] Free memory is 2808kB above reserved [ 1639.079901] lowmemorykiller: Killing 'syz-executor.3' (2164) (tgid 2164), adj 1000, [ 1639.079901] to free 35968kB on behalf of 'kswapd0' (33) because [ 1639.079901] cache 16188kB is below limit 16384kB for oom_score_adj 6 [ 1639.079901] Free memory is -13252kB above reserved [ 1639.081470] lowmemorykiller: Killing 'syz-executor.3' (2194) (tgid 2194), adj 1000, [ 1639.081470] to free 35968kB on behalf of 'kswapd0' (33) because [ 1639.081470] cache 16188kB is below limit 16384kB for oom_score_adj 6 [ 1639.081470] Free memory is -12852kB above reserved [ 1639.086704] lowmemorykiller: Killing 'syz-executor.3' (2231) (tgid 2231), adj 1000, [ 1639.086704] to free 35968kB on behalf of 'kswapd0' (33) because [ 1639.086704] cache 16188kB is below limit 16384kB for oom_score_adj 6 [ 1639.086704] Free memory is -12852kB above reserved [ 1639.089593] lowmemorykiller: Killing 'syz-executor.3' (2282) (tgid 2282), adj 1000, [ 1639.089593] to free 35968kB on behalf of 'syz-executor.4' (16604) because [ 1639.089593] cache 16188kB is below limit 16384kB for oom_score_adj 6 [ 1639.089593] Free memory is -13252kB above reserved [ 1639.099501] lowmemorykiller: Killing 'syz-executor.3' (2573) (tgid 2573), adj 1000, [ 1639.099501] to free 35968kB on behalf of 'kswapd0' (33) because [ 1639.099501] cache 16188kB is below limit 16384kB for oom_score_adj 6 [ 1639.099501] Free memory is -12852kB above reserved [ 1639.102903] lowmemorykiller: Killing 'syz-executor.3' (3369) (tgid 3369), adj 1000, [ 1639.102903] to free 35968kB on behalf of 'kswapd0' (33) because [ 1639.102903] cache 15988kB is below limit 16384kB for oom_score_adj 6 [ 1639.102903] Free memory is -12940kB above reserved [ 1639.117375] lowmemorykiller: Killing 'syz-executor.3' (3720) (tgid 3720), adj 1000, [ 1639.117375] to free 35968kB on behalf of 'kswapd0' (33) because [ 1639.117375] cache 15988kB is below limit 16384kB for oom_score_adj 6 [ 1639.117375] Free memory is -12640kB above reserved [ 1639.122577] lowmemorykiller: Killing 'syz-executor.3' (3742) (tgid 3742), adj 1000, [ 1639.122577] to free 35968kB on behalf of 'kswapd0' (33) because [ 1639.122577] cache 15788kB is below limit 16384kB for oom_score_adj 6 [ 1639.122577] Free memory is -11412kB above reserved [ 1639.124094] lowmemorykiller: Killing 'syz-executor.3' (3826) (tgid 3826), adj 1000, [ 1639.124094] to free 35968kB on behalf of 'kswapd0' (33) because [ 1639.124094] cache 15788kB is below limit 16384kB for oom_score_adj 6 [ 1639.124094] Free memory is -11312kB above reserved [ 1639.129859] lowmemorykiller: Killing 'syz-executor.5' (15341) (tgid 15341), adj 1000, [ 1639.129859] to free 35968kB on behalf of 'syz-executor.4' (16604) because [ 1639.129859] cache 15788kB is below limit 16384kB for oom_score_adj 6 [ 1639.129859] Free memory is -11412kB above reserved [ 1639.131180] lowmemorykiller: Killing 'syz-executor.5' (13218) (tgid 13218), adj 1000, [ 1639.131180] to free 35964kB on behalf of 'syz-executor.4' (16604) because [ 1639.131180] cache 15788kB is below limit 16384kB for oom_score_adj 6 [ 1639.131180] Free memory is -11112kB above reserved [ 1639.143637] lowmemorykiller: Killing 'syz-executor.5' (21715) (tgid 21715), adj 1000, [ 1639.143637] to free 35964kB on behalf of 'kswapd0' (33) because [ 1639.143637] cache 15836kB is below limit 16384kB for oom_score_adj 6 [ 1639.143637] Free memory is -10828kB above reserved [ 1639.153113] lowmemorykiller: Killing 'syz-executor.5' (31347) (tgid 31347), adj 1000, [ 1639.153113] to free 35920kB on behalf of 'kswapd0' (33) because [ 1639.153113] cache 15736kB is below limit 16384kB for oom_score_adj 6 [ 1639.153113] Free memory is -5948kB above reserved [ 1639.163900] lowmemorykiller: Killing 'syz-executor.2' (19213) (tgid 19213), adj 1000, [ 1639.163900] to free 35892kB on behalf of 'syz-executor.4' (16604) because [ 1639.163900] cache 15536kB is below limit 16384kB for oom_score_adj 6 [ 1639.163900] Free memory is -5108kB above reserved [ 1639.169128] lowmemorykiller: Killing 'syz-executor.2' (10681) (tgid 10681), adj 1000, [ 1639.169128] to free 35896kB on behalf of 'kswapd0' (33) because [ 1639.169128] cache 15636kB is below limit 16384kB for oom_score_adj 6 [ 1639.169128] Free memory is -5648kB above reserved [ 1639.176751] lowmemorykiller: Killing 'syz-executor.4' (19659) (tgid 19659), adj 1000, [ 1639.176751] to free 35892kB on behalf of 'syz-executor.4' (16604) because [ 1639.176751] cache 15536kB is below limit 16384kB for oom_score_adj 6 [ 1639.176751] Free memory is -13268kB above reserved [ 1639.178687] lowmemorykiller: Killing 'syz-executor.2' (19241) (tgid 19241), adj 1000, [ 1639.178687] to free 35892kB on behalf of 'kswapd0' (33) because [ 1639.178687] cache 15584kB is below limit 16384kB for oom_score_adj 6 [ 1639.178687] Free memory is -13068kB above reserved [ 1639.180347] lowmemorykiller: Killing 'syz-executor.4' (19814) (tgid 19814), adj 1000, [ 1639.180347] to free 35892kB on behalf of 'kswapd0' (33) because [ 1639.180347] cache 15484kB is below limit 16384kB for oom_score_adj 6 [ 1639.180347] Free memory is -12640kB above reserved [ 1639.186489] lowmemorykiller: Killing 'syz-executor.4' (22016) (tgid 22016), adj 1000, [ 1639.186489] to free 35892kB on behalf of 'kswapd0' (33) because [ 1639.186489] cache 14784kB is below limit 16384kB for oom_score_adj 6 [ 1639.186489] Free memory is -11940kB above reserved [ 1639.192679] lowmemorykiller: Killing 'syz-executor.4' (22333) (tgid 22333), adj 1000, [ 1639.192679] to free 35892kB on behalf of 'syz-executor.4' (16604) because [ 1639.192679] cache 15484kB is below limit 16384kB for oom_score_adj 6 [ 1639.192679] Free memory is -12640kB above reserved [ 1639.194542] lowmemorykiller: Killing 'syz-executor.4' (370) (tgid 370), adj 1000, [ 1639.194542] to free 35892kB on behalf of 'syz-executor.4' (16604) because [ 1639.194542] cache 15032kB is below limit 16384kB for oom_score_adj 6 [ 1639.194542] Free memory is -10328kB above reserved [ 1639.198738] lowmemorykiller: Killing 'syz-executor.4' (399) (tgid 399), adj 1000, [ 1639.198738] to free 35892kB on behalf of 'syz-executor.4' (16604) because [ 1639.198738] cache 15032kB is below limit 16384kB for oom_score_adj 6 [ 1639.198738] Free memory is -10224kB above reserved [ 1639.199900] lowmemorykiller: Killing 'syz-executor.4' (8889) (tgid 8889), adj 1000, [ 1639.199900] to free 35892kB on behalf of 'syz-executor.4' (16604) because [ 1639.199900] cache 15032kB is below limit 16384kB for oom_score_adj 6 [ 1639.199900] Free memory is -8520kB above reserved [ 1639.204071] lowmemorykiller: Killing 'syz-executor.4' (22268) (tgid 22268), adj 1000, [ 1639.204071] to free 35892kB on behalf of 'kswapd0' (33) because [ 1639.204071] cache 14784kB is below limit 16384kB for oom_score_adj 6 [ 1639.204071] Free memory is -11840kB above reserved [ 1639.205310] lowmemorykiller: Killing 'syz-executor.4' (8910) (tgid 8910), adj 1000, [ 1639.205310] to free 35892kB on behalf of 'syz-executor.4' (16604) because [ 1639.205310] cache 15032kB is below limit 16384kB for oom_score_adj 6 [ 1639.205310] Free memory is -7520kB above reserved [ 1639.206803] lowmemorykiller: Killing 'syz-executor.2' (8962) (tgid 8962), adj 1000, [ 1639.206803] to free 35892kB on behalf of 'kswapd0' (33) because [ 1639.206803] cache 15132kB is below limit 16384kB for oom_score_adj 6 [ 1639.206803] Free memory is -5520kB above reserved [ 1639.214631] lowmemorykiller: Killing 'syz-executor.2' (8974) (tgid 8974), adj 1000, [ 1639.214631] to free 35892kB on behalf of 'kswapd0' (33) because [ 1639.214631] cache 15332kB is below limit 16384kB for oom_score_adj 6 [ 1639.214631] Free memory is -8420kB above reserved [ 1639.216107] lowmemorykiller: Killing 'syz-executor.0' (10445) (tgid 10445), adj 1000, [ 1639.216107] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.216107] cache 15432kB is below limit 16384kB for oom_score_adj 6 [ 1639.216107] Free memory is -12736kB above reserved [ 1639.258622] lowmemorykiller: Killing 'syz-executor.3' (11339) (tgid 11339), adj 1000, [ 1639.258622] to free 35888kB on behalf of 'syz-executor.4' (16604) because [ 1639.258622] cache 13532kB is below limit 16384kB for oom_score_adj 6 [ 1639.258622] Free memory is -13152kB above reserved [ 1639.260213] lowmemorykiller: Killing 'syz-executor.3' (20580) (tgid 20580), adj 1000, [ 1639.260213] to free 35888kB on behalf of 'syz-executor.4' (16604) because [ 1639.260213] cache 12980kB is below limit 16384kB for oom_score_adj 6 [ 1639.260213] Free memory is -4208kB above reserved [ 1639.268725] lowmemorykiller: Killing 'syz-executor.3' (20580) (tgid 20580), adj 1000, [ 1639.268725] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.268725] cache 12980kB is below limit 16384kB for oom_score_adj 6 [ 1639.268725] Free memory is -4424kB above reserved [ 1639.289794] lowmemorykiller: Killing 'syz-executor.3' (20614) (tgid 20614), adj 1000, [ 1639.289794] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.289794] cache 12880kB is below limit 16384kB for oom_score_adj 6 [ 1639.289794] Free memory is -7432kB above reserved [ 1639.352305] lowmemorykiller: Killing 'syz-executor.1' (25417) (tgid 25417), adj 1000, [ 1639.352305] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.352305] cache 10728kB is below limit 16384kB for oom_score_adj 6 [ 1639.352305] Free memory is -6784kB above reserved [ 1639.366751] lowmemorykiller: Killing 'syz-executor.3' (926) (tgid 926), adj 1000, [ 1639.366751] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.366751] cache 10876kB is below limit 16384kB for oom_score_adj 6 [ 1639.366751] Free memory is -7836kB above reserved [ 1639.371899] lowmemorykiller: Killing 'syz-executor.1' (1803) (tgid 1803), adj 1000, [ 1639.371899] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.371899] cache 10876kB is below limit 16384kB for oom_score_adj 6 [ 1639.371899] Free memory is -7556kB above reserved [ 1639.373654] lowmemorykiller: Killing 'syz-executor.1' (1947) (tgid 1947), adj 1000, [ 1639.373654] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.373654] cache 11024kB is below limit 16384kB for oom_score_adj 6 [ 1639.373654] Free memory is -7152kB above reserved [ 1639.398109] lowmemorykiller: Killing 'syz-executor.3' (3860) (tgid 3860), adj 1000, [ 1639.398109] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.398109] cache 11024kB is below limit 16384kB for oom_score_adj 6 [ 1639.398109] Free memory is -7152kB above reserved [ 1639.405582] lowmemorykiller: Killing 'syz-executor.3' (3919) (tgid 3919), adj 1000, [ 1639.405582] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.405582] cache 11024kB is below limit 16384kB for oom_score_adj 6 [ 1639.405582] Free memory is -7152kB above reserved [ 1639.420042] lowmemorykiller: Killing 'syz-executor.0' (3964) (tgid 3964), adj 1000, [ 1639.420042] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.420042] cache 11172kB is below limit 16384kB for oom_score_adj 6 [ 1639.420042] Free memory is -6300kB above reserved [ 1639.425600] lowmemorykiller: Killing 'syz-executor.3' (4713) (tgid 4713), adj 1000, [ 1639.425600] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.425600] cache 11172kB is below limit 16384kB for oom_score_adj 6 [ 1639.425600] Free memory is -6200kB above reserved [ 1639.427078] lowmemorykiller: Killing 'syz-executor.3' (6238) (tgid 6238), adj 1000, [ 1639.427078] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.427078] cache 11320kB is below limit 16384kB for oom_score_adj 6 [ 1639.427078] Free memory is -5700kB above reserved [ 1639.439912] lowmemorykiller: Killing 'syz-executor.3' (7082) (tgid 7082), adj 1000, [ 1639.439912] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.439912] cache 11320kB is below limit 16384kB for oom_score_adj 6 [ 1639.439912] Free memory is -5700kB above reserved [ 1639.444628] lowmemorykiller: Killing 'syz-executor.0' (7388) (tgid 7388), adj 1000, [ 1639.444628] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.444628] cache 11320kB is below limit 16384kB for oom_score_adj 6 [ 1639.444628] Free memory is -5300kB above reserved [ 1639.446085] lowmemorykiller: Killing 'syz-executor.3' (7553) (tgid 7553), adj 1000, [ 1639.446085] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.446085] cache 11468kB is below limit 16384kB for oom_score_adj 6 [ 1639.446085] Free memory is -5000kB above reserved [ 1639.450588] lowmemorykiller: Killing 'syz-executor.3' (7581) (tgid 7581), adj 1000, [ 1639.450588] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.450588] cache 11468kB is below limit 16384kB for oom_score_adj 6 [ 1639.450588] Free memory is -5000kB above reserved [ 1639.455047] lowmemorykiller: Killing 'syz-executor.0' (8818) (tgid 8818), adj 1000, [ 1639.455047] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.455047] cache 11468kB is below limit 16384kB for oom_score_adj 6 [ 1639.455047] Free memory is -4600kB above reserved [ 1639.456481] lowmemorykiller: Killing 'syz-executor.1' (9011) (tgid 9011), adj 1000, [ 1639.456481] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.456481] cache 11468kB is below limit 16384kB for oom_score_adj 6 [ 1639.456481] Free memory is -4300kB above reserved [ 1639.467729] lowmemorykiller: Killing 'syz-executor.1' (9597) (tgid 9597), adj 1000, [ 1639.467729] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.467729] cache 11444kB is below limit 16384kB for oom_score_adj 6 [ 1639.467729] Free memory is -4232kB above reserved [ 1639.472018] lowmemorykiller: Killing 'syz-executor.3' (10133) (tgid 10133), adj 1000, [ 1639.472018] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.472018] cache 11516kB is below limit 16384kB for oom_score_adj 6 [ 1639.472018] Free memory is -3704kB above reserved [ 1639.476178] lowmemorykiller: Killing 'syz-executor.1' (10853) (tgid 10853), adj 1000, [ 1639.476178] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.476178] cache 11516kB is below limit 16384kB for oom_score_adj 6 [ 1639.476178] Free memory is -3404kB above reserved [ 1639.477441] lowmemorykiller: Killing 'syz-executor.3' (11331) (tgid 11331), adj 1000, [ 1639.477441] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.477441] cache 11516kB is below limit 16384kB for oom_score_adj 6 [ 1639.477441] Free memory is -3104kB above reserved [ 1639.481970] lowmemorykiller: Killing 'syz-executor.0' (11665) (tgid 11665), adj 1000, [ 1639.481970] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.481970] cache 11516kB is below limit 16384kB for oom_score_adj 6 [ 1639.481970] Free memory is -3104kB above reserved [ 1639.487608] lowmemorykiller: Killing 'syz-executor.1' (11860) (tgid 11860), adj 1000, [ 1639.487608] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.487608] cache 11516kB is below limit 16384kB for oom_score_adj 6 [ 1639.487608] Free memory is -2584kB above reserved [ 1639.492262] lowmemorykiller: Killing 'syz-executor.0' (12017) (tgid 12017), adj 1000, [ 1639.492262] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.492262] cache 11516kB is below limit 16384kB for oom_score_adj 6 [ 1639.492262] Free memory is -2384kB above reserved [ 1639.493551] lowmemorykiller: Killing 'syz-executor.0' (12197) (tgid 12197), adj 1000, [ 1639.493551] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.493551] cache 11516kB is below limit 16384kB for oom_score_adj 6 [ 1639.493551] Free memory is -2072kB above reserved [ 1639.520650] lowmemorykiller: Killing 'syz-executor.0' (12997) (tgid 12997), adj 1000, [ 1639.520650] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.520650] cache 11516kB is below limit 16384kB for oom_score_adj 6 [ 1639.520650] Free memory is -2072kB above reserved [ 1639.525309] lowmemorykiller: Killing 'syz-executor.0' (13027) (tgid 13027), adj 1000, [ 1639.525309] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.525309] cache 11516kB is below limit 16384kB for oom_score_adj 6 [ 1639.525309] Free memory is -1372kB above reserved [ 1639.526784] lowmemorykiller: Killing 'syz-executor.0' (13189) (tgid 13189), adj 1000, [ 1639.526784] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.526784] cache 11812kB is below limit 16384kB for oom_score_adj 6 [ 1639.526784] Free memory is -1260kB above reserved [ 1639.528053] lowmemorykiller: Killing 'syz-executor.0' (13321) (tgid 13321), adj 1000, [ 1639.528053] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.528053] cache 11812kB is below limit 16384kB for oom_score_adj 6 [ 1639.528053] Free memory is -1260kB above reserved [ 1639.531000] lowmemorykiller: Killing 'syz-executor.0' (14011) (tgid 14011), adj 1000, [ 1639.531000] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.531000] cache 11812kB is below limit 16384kB for oom_score_adj 6 [ 1639.531000] Free memory is -1260kB above reserved [ 1639.537737] lowmemorykiller: Killing 'syz-executor.0' (14275) (tgid 14275), adj 1000, [ 1639.537737] to free 35888kB on behalf of 'kswapd0' (33) because [ 1639.537737] cache 11812kB is below limit 16384kB for oom_score_adj 6 [ 1639.537737] Free memory is -1060kB above reserved [ 1639.538917] lowmemorykiller: Killing 'syz-executor.0' (11249) (tgid 11249), adj 1000, [ 1639.538917] to free 35884kB on behalf of 'kswapd0' (33) because [ 1639.538917] cache 11812kB is below limit 16384kB for oom_score_adj 6 [ 1639.538917] Free memory is -160kB above reserved [ 1639.539944] lowmemorykiller: Killing 'syz-executor.5' (12529) (tgid 12529), adj 1000, [ 1639.539944] to free 35884kB on behalf of 'kswapd0' (33) because [ 1639.539944] cache 11812kB is below limit 16384kB for oom_score_adj 6 [ 1639.539944] Free memory is -160kB above reserved [ 1639.543194] lowmemorykiller: Killing 'syz-executor.4' (19705) (tgid 19705), adj 1000, [ 1639.543194] to free 35884kB on behalf of 'kswapd0' (33) because [ 1639.543194] cache 11812kB is below limit 16384kB for oom_score_adj 6 [ 1639.543194] Free memory is 40kB above reserved [ 1639.546432] lowmemorykiller: Killing 'syz-executor.4' (19721) (tgid 19721), adj 1000, [ 1639.546432] to free 35884kB on behalf of 'kswapd0' (33) because [ 1639.546432] cache 11812kB is below limit 16384kB for oom_score_adj 6 [ 1639.546432] Free memory is 360kB above reserved [ 1639.549930] lowmemorykiller: Killing 'syz-executor.4' (20430) (tgid 20430), adj 1000, [ 1639.549930] to free 35884kB on behalf of 'kswapd0' (33) because [ 1639.549930] cache 11812kB is below limit 16384kB for oom_score_adj 6 [ 1639.549930] Free memory is 560kB above reserved [ 1639.568608] lowmemorykiller: Killing 'syz-executor.4' (20736) (tgid 20736), adj 1000, [ 1639.568608] to free 35884kB on behalf of 'kswapd0' (33) because [ 1639.568608] cache 11912kB is below limit 16384kB for oom_score_adj 6 [ 1639.568608] Free memory is 2760kB above reserved [ 1639.570404] lowmemorykiller: Killing 'syz-executor.4' (20759) (tgid 20759), adj 1000, [ 1639.570404] to free 35884kB on behalf of 'kswapd0' (33) because [ 1639.570404] cache 11912kB is below limit 65536kB for oom_score_adj 12 [ 1639.570404] Free memory is 16460kB above reserved [ 1639.571944] lowmemorykiller: Killing 'syz-executor.4' (21044) (tgid 21044), adj 1000, [ 1639.571944] to free 35884kB on behalf of 'kswapd0' (33) because [ 1639.571944] cache 11912kB is below limit 65536kB for oom_score_adj 12 [ 1639.571944] Free memory is 16460kB above reserved [ 1642.132458] audit_printk_skb: 987 callbacks suppressed [ 1642.132466] audit: type=1400 audit(1565077666.762:120077): avc: denied { sys_admin } for pid=2101 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1642.135212] audit: type=1400 audit(1565077666.762:120078): avc: denied { sys_admin } for pid=2101 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1642.140778] audit: type=1400 audit(1565077666.762:120079): avc: denied { sys_admin } for pid=2101 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1642.220121] audit: type=1400 audit(1565077666.862:120080): avc: denied { sys_admin } for pid=2101 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1642.236880] audit: type=1400 audit(1565077666.862:120081): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1642.238568] audit: type=1400 audit(1565077666.862:120082): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1642.240351] audit: type=1400 audit(1565077666.862:120083): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1642.241961] audit: type=1400 audit(1565077666.862:120084): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1642.243600] audit: type=1400 audit(1565077666.862:120085): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1642.245274] audit: type=1400 audit(1565077666.862:120086): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1643.058428] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1643.058445] CPU: 1 PID: 16696 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1643.058464] ffff88019d167888 ffffffff81b42e79 1ffff10033a2cf13 ffff88019aa05f00 [ 1643.058477] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019d1679d0 [ 1643.058491] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1643.058493] Call Trace: [ 1643.058510] [] dump_stack+0xc1/0x128 [ 1643.058520] [] warn_alloc.cold.31+0x7f/0x9c [ 1643.058530] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1643.058538] [] ? depot_save_stack+0x11c/0x470 [ 1643.058547] [] ? save_stack_trace+0x16/0x20 [ 1643.058555] [] ? xt_alloc_table_info+0x70/0x100 [ 1643.058564] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1643.058573] [] ? nf_setsockopt+0x6d/0xc0 [ 1643.058583] [] ? check_preemption_disabled+0x3b/0x200 [ 1643.058590] [] __vmalloc_node_range+0x35e/0x600 [ 1643.058599] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1643.058605] [] vmalloc+0x5b/0x70 [ 1643.058613] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1643.058620] [] xt_alloc_entry_offsets+0x41/0x60 [ 1643.058629] [] translate_table+0x215/0x1690 [ 1643.058637] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1643.058646] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1643.058655] [] ? __check_object_size+0x248/0x38e [ 1643.058663] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1643.058672] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1643.058682] [] ? mutex_unlock+0x9/0x10 [ 1643.058690] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1643.058698] [] nf_setsockopt+0x6d/0xc0 [ 1643.058707] [] ipv6_setsockopt+0xc8/0x130 [ 1643.058716] [] tcp_setsockopt+0x88/0xe0 [ 1643.058724] [] sock_common_setsockopt+0x9a/0xe0 [ 1643.058732] [] SyS_setsockopt+0x166/0x260 [ 1643.058740] [] ? SyS_recv+0x40/0x40 [ 1643.058749] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1643.058757] [] ? SyS_clock_settime+0x220/0x220 [ 1643.058765] [] ? do_syscall_64+0x48/0x550 [ 1643.058772] [] ? SyS_recv+0x40/0x40 [ 1643.058779] [] do_syscall_64+0x19f/0x550 [ 1643.058788] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1643.086951] Mem-Info: [ 1643.087011] active_anon:68838 inactive_anon:328842 isolated_anon:0 [ 1643.087011] active_file:1446 inactive_file:3205 isolated_file:0 [ 1643.087011] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1643.087011] slab_reclaimable:7007 slab_unreclaimable:67215 [ 1643.087011] mapped:55953 shmem:334600 pagetables:15905 bounce:0 [ 1643.087011] free:1084537 free_pcp:467 free_cma:0 [ 1643.087030] Node 0 active_anon:275352kB inactive_anon:1315368kB active_file:5784kB inactive_file:12820kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:223812kB dirty:24kB writeback:0kB shmem:1338400kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1643.087056] DMA32 free:3012904kB min:4696kB low:7712kB high:10728kB active_anon:112kB inactive_anon:40kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1996kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1128kB local_pcp:668kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1643.087091] Normal free:1325244kB min:5580kB low:9168kB high:12756kB active_anon:275240kB inactive_anon:1315328kB active_file:5784kB inactive_file:12820kB unevictable:0kB writepending:24kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28028kB slab_unreclaimable:266864kB kernel_stack:22432kB pagetables:63396kB bounce:0kB free_pcp:740kB local_pcp:376kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1643.087147] DMA32: 110*4kB (UM) 70*8kB (UM) 68*16kB (UM) 90*32kB (UM) 87*64kB (UM) 74*128kB (UM) 77*256kB (UM) 75*512kB (UM) 66*1024kB (UM) 46*2048kB (UM) 677*4096kB (U) = 3012904kB Normal: 15529*4kB (UMEH) 8819*8kB (UMEH) 5581*16kB (UMEH) 4767*32kB (UMEH) 3109*64kB (UME) 1896*128kB (UM) 840*256kB (UME) 320*512kB (UM) 83*1024kB (UM) 16*2048kB (UM) 3*4096kB (U) = 1325100kB 339251 total pagecache pages [ 1643.087198] 0 pages in swap cache [ 1643.087203] Swap cache stats: add 0, delete 0, find 0/0 [ 1643.087205] Free swap = 0kB [ 1643.087207] Total swap = 0kB [ 1643.087209] 1965979 pages RAM [ 1643.087211] 0 pages HighMem/MovableOnly [ 1643.087213] 313617 pages reserved [ 1644.129375] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1644.129387] CPU: 1 PID: 16717 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1644.129405] ffff8801d427f888 ffffffff81b42e79 1ffff1003a84ff13 ffff88019048c740 [ 1644.129419] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801d427f9d0 [ 1644.129432] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1644.129435] Call Trace: [ 1644.129454] [] dump_stack+0xc1/0x128 [ 1644.129464] [] warn_alloc.cold.31+0x7f/0x9c [ 1644.129474] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1644.129484] [] ? depot_save_stack+0x11c/0x470 [ 1644.129498] [] ? save_stack_trace+0x16/0x20 [ 1644.129508] [] ? xt_alloc_table_info+0x70/0x100 [ 1644.129517] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1644.129526] [] ? nf_setsockopt+0x6d/0xc0 [ 1644.129535] [] ? check_preemption_disabled+0x3b/0x200 [ 1644.129543] [] __vmalloc_node_range+0x35e/0x600 [ 1644.129551] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1644.129558] [] vmalloc+0x5b/0x70 [ 1644.129566] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1644.129574] [] xt_alloc_entry_offsets+0x41/0x60 [ 1644.129583] [] translate_table+0x215/0x1690 [ 1644.129591] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1644.129600] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1644.129609] [] ? __check_object_size+0x248/0x38e [ 1644.129618] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1644.129627] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1644.129637] [] ? mutex_unlock+0x9/0x10 [ 1644.129645] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1644.129653] [] nf_setsockopt+0x6d/0xc0 [ 1644.129662] [] ipv6_setsockopt+0xc8/0x130 [ 1644.129671] [] tcp_setsockopt+0x88/0xe0 [ 1644.129680] [] sock_common_setsockopt+0x9a/0xe0 [ 1644.129688] [] SyS_setsockopt+0x166/0x260 [ 1644.129695] [] ? SyS_recv+0x40/0x40 [ 1644.129705] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1644.129714] [] ? SyS_clock_settime+0x220/0x220 [ 1644.129721] [] ? do_syscall_64+0x48/0x550 [ 1644.129729] [] ? SyS_recv+0x40/0x40 [ 1644.129736] [] do_syscall_64+0x19f/0x550 [ 1644.129745] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1644.129748] Mem-Info: [ 1644.129769] active_anon:69008 inactive_anon:328848 isolated_anon:0 [ 1644.129769] active_file:1603 inactive_file:3211 isolated_file:0 [ 1644.129769] unevictable:0 dirty:39 writeback:0 unstable:0 [ 1644.129769] slab_reclaimable:7007 slab_unreclaimable:66826 [ 1644.129769] mapped:56033 shmem:334617 pagetables:15991 bounce:0 [ 1644.129769] free:1084470 free_pcp:445 free_cma:0 [ 1644.129785] Node 0 active_anon:276032kB inactive_anon:1315392kB active_file:6412kB inactive_file:12844kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:224132kB dirty:156kB writeback:0kB shmem:1338468kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1644.129806] DMA32 free:3012904kB min:4696kB low:7712kB high:10728kB active_anon:104kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1996kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1156kB local_pcp:684kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1644.129852] Normal free:1324976kB min:5580kB low:9168kB high:12756kB active_anon:276028kB inactive_anon:1315356kB active_file:6412kB inactive_file:12844kB unevictable:0kB writepending:156kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28028kB slab_unreclaimable:265308kB kernel_stack:22528kB pagetables:63740kB bounce:0kB free_pcp:624kB local_pcp:180kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1644.129939] DMA32: 110*4kB (UM) 70*8kB (UM) 68*16kB (UM) 90*32kB (UM) 87*64kB (UM) 74*128kB (UM) 77*256kB (UM) 75*512kB (UM) 66*1024kB (UM) 46*2048kB (UM) 677*4096kB (U) = 3012904kB Normal: 15178*4kB (UMEH) 8821*8kB (UMEH) 5582*16kB (UMEH) 4796*32kB (UMEH) 3114*64kB (UME) 1896*128kB (UM) 840*256kB (UME) 320*512kB (UM) 83*1024kB (UM) 16*2048kB (UM) 3*4096kB (U) = 1324976kB 339443 total pagecache pages [ 1644.129990] 0 pages in swap cache [ 1644.129993] Swap cache stats: add 0, delete 0, find 0/0 [ 1644.129995] Free swap = 0kB [ 1644.129996] Total swap = 0kB [ 1644.129998] 1965979 pages RAM [ 1644.130000] 0 pages HighMem/MovableOnly [ 1644.130002] 313617 pages reserved 07:48:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/205, 0xfffffcd3}], 0x2, 0x1f000000) 07:48:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:24 executing program 1: unshare(0x40000000) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) memfd_create(&(0x7f00000000c0)='ip6_vti0\x00', 0x0) r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x800000000002, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/zero\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000b80)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000061c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000006240)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000006340)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000006380)={@empty, 0x0}, &(0x7f00000063c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000006400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000006440)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000006480)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000006580)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f00000065c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006600)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000006640)={{{@in6=@ipv4={[], [], @local}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000006740)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006b80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006b40)={&(0x7f0000006780)=ANY=[@ANYBLOB="9c030000", @ANYRES16=r3, @ANYBLOB="00022abd7000fedbdf250100e4ff07000100", @ANYRES32=r4, @ANYBLOB="3001020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000700000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400800000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000900000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r6, @ANYBLOB="b80002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004005b03000008000100", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040008000000"], 0x39c}, 0x1, 0x0, 0x0, 0x4001}, 0x20008081) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x4}) 07:48:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1644.163148] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1644.163159] CPU: 1 PID: 16725 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1644.163174] ffff8801c6b77888 ffffffff81b42e79 1ffff10038d6ef13 ffff8801a4832f80 [ 1644.163185] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801c6b779d0 [ 1644.163198] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1644.163200] Call Trace: [ 1644.163218] [] dump_stack+0xc1/0x128 07:48:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000140)=@v2={0x7, 0x2, 0x14, 0x63, 0xbe, "e16ef9e61ccf91eac74142c41698404c21c114cec19ad383ee196489a080d70f6eed77d689df32a366c3357eff8fe4d70f5c606c0cb08a44bf768df157ca3dc18e13c53ee992e953ecea4333bca16abd69975e5f1d01d8fbd3e75d4060abbc17d167905763a5c6f22cc6b8b1968fa58843b5fe811abb5c4b3c926354b42ab71e8e0750cb8e879d5845cf67681b06d8fa0b742cc7931443e2b3ec42241ce57af30eff77a8986fca22177b9046d2637d86ea8ef9e959b467bd03440d82098e"}, 0xc8, 0x2) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x10100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000002c0)={{0xbb, @multicast1, 0x4e23, 0x3, 'rr\x00', 0x4, 0x3, 0x36}, {@loopback, 0x4e24, 0x12000, 0x7fff, 0x10000, 0x9}}, 0x44) [ 1644.163229] [] warn_alloc.cold.31+0x7f/0x9c [ 1644.163239] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1644.163248] [] ? depot_save_stack+0x11c/0x470 [ 1644.163258] [] ? save_stack_trace+0x16/0x20 [ 1644.163268] [] ? xt_alloc_table_info+0x70/0x100 [ 1644.163277] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1644.163285] [] ? nf_setsockopt+0x6d/0xc0 [ 1644.163294] [] ? check_preemption_disabled+0x3b/0x200 [ 1644.163303] [] __vmalloc_node_range+0x35e/0x600 [ 1644.163312] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1644.163319] [] vmalloc+0x5b/0x70 [ 1644.163326] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1644.163335] [] xt_alloc_entry_offsets+0x41/0x60 [ 1644.163343] [] translate_table+0x215/0x1690 [ 1644.163351] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1644.163361] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1644.163369] [] ? __check_object_size+0x248/0x38e [ 1644.163378] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1644.163387] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1644.163397] [] ? mutex_unlock+0x9/0x10 07:48:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/25, 0x1a}], 0x0, &(0x7f00000003c0)=""/232}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f0000001200)=[{&(0x7f00000000c0)=""/8}, {&(0x7f0000000100)=""/97}, {&(0x7f0000002280)=""/4096}, {&(0x7f0000001180)=""/64}, {&(0x7f00000011c0)=""/51, 0xfffffffffffffee3}], 0x10000069, 0x0) [ 1644.163405] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1644.163413] [] nf_setsockopt+0x6d/0xc0 07:48:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1644.163422] [] ipv6_setsockopt+0xc8/0x130 [ 1644.163431] [] tcp_setsockopt+0x88/0xe0 [ 1644.163439] [] sock_common_setsockopt+0x9a/0xe0 [ 1644.163447] [] SyS_setsockopt+0x166/0x260 [ 1644.163455] [] ? SyS_recv+0x40/0x40 [ 1644.163465] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1644.163473] [] ? SyS_clock_settime+0x220/0x220 [ 1644.163480] [] ? do_syscall_64+0x48/0x550 07:48:25 executing program 1: [ 1644.163488] [] ? SyS_recv+0x40/0x40 [ 1644.163495] [] do_syscall_64+0x19f/0x550 07:48:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000240)=""/30) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000140)=0x8000, 0x4) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) rt_sigreturn() getpgrp(r3) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@loopback}, &(0x7f0000000040)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0xdd, {{0x2, 0x4e23, @loopback}}}, 0x88) [ 1644.163504] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1644.163507] Mem-Info: [ 1644.163527] active_anon:69033 inactive_anon:328848 isolated_anon:0 [ 1644.163527] active_file:1603 inactive_file:3211 isolated_file:0 [ 1644.163527] unevictable:0 dirty:39 writeback:0 unstable:0 [ 1644.163527] slab_reclaimable:7007 slab_unreclaimable:66826 [ 1644.163527] mapped:56033 shmem:334617 pagetables:15991 bounce:0 [ 1644.163527] free:1084470 free_pcp:423 free_cma:0 07:48:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, &(0x7f00000001c0)=0x80, 0x800) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="ea4dde0222ba4b5f3a2a843bd74902ea2316cf4f019acba35e3343efaca21bfb78e787860b2fe6803c5f4cdf7e436317b699b14db3a8c1ddbc72d7e1ffffffffffffff19c0b6c5925f96764dc4ba8352f29888b97b8648c37f3efd45fa7accbe5777f088beee85e4470e5b8db69346c8f4513150468b5cc88464465df2aa3e6ff4"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x80, &(0x7f0000000100)='\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r1, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1644.163543] Node 0 active_anon:276132kB inactive_anon:1315392kB active_file:6412kB inactive_file:12844kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:224132kB dirty:156kB writeback:0kB shmem:1338468kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:48:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:26 executing program 5: [ 1644.163563] DMA32 free:3012904kB min:4696kB low:7712kB high:10728kB active_anon:104kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1996kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1156kB local_pcp:684kB free_cma:0kB 07:48:26 executing program 1: lowmem_reserve[]: 0 3505 3505 [ 1644.163592] Normal free:1324976kB min:5580kB low:9168kB high:12756kB active_anon:276028kB inactive_anon:1315356kB active_file:6412kB inactive_file:12844kB unevictable:0kB writepending:156kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28028kB slab_unreclaimable:265308kB kernel_stack:22624kB pagetables:63740kB bounce:0kB free_pcp:536kB local_pcp:116kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1644.163658] DMA32: 110*4kB (UM) 70*8kB (UM) 68*16kB (UM) 90*32kB (UM) 87*64kB (UM) 74*128kB (UM) 77*256kB (UM) 75*512kB (UM) 66*1024kB (UM) 46*2048kB (UM) 677*4096kB (U) = 3012904kB 07:48:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:26 executing program 1: 07:48:26 executing program 5: 07:48:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) pipe(&(0x7f0000000000)) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) tkill(r3, 0x3c) Normal: 15178*4kB (UMEH) 8821*8kB (UMEH) 5582*16kB (UMEH) 4793*32kB (UMEH) 3114*64kB (UME) 1896*128kB (UM) 840*256kB (UME) 320*512kB (UM) 83*1024kB (UM) 16*2048kB (UM) 3*4096kB (U) = 1324880kB 339443 total pagecache pages [ 1644.163716] 0 pages in swap cache [ 1644.163720] Swap cache stats: add 0, delete 0, find 0/0 [ 1644.163723] Free swap = 0kB [ 1644.163725] Total swap = 0kB [ 1644.163727] 1965979 pages RAM [ 1644.163729] 0 pages HighMem/MovableOnly [ 1644.163732] 313617 pages reserved [ 1647.150374] audit_printk_skb: 1407 callbacks suppressed [ 1647.150383] audit: type=1400 audit(1565077671.792:120556): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:48:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:27 executing program 1: 07:48:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1647.160063] audit: type=1400 audit(1565077671.802:120557): avc: denied { net_admin } for pid=16801 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:48:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1647.166219] audit: type=1400 audit(1565077671.802:120558): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1647.168449] audit: type=1400 audit(1565077671.802:120559): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1647.174621] audit: type=1400 audit(1565077671.812:120560): avc: denied { sys_admin } for pid=2099 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1647.191572] audit: type=1400 audit(1565077671.832:120561): avc: denied { sys_admin } for pid=2103 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1647.193236] audit: type=1400 audit(1565077671.832:120562): avc: denied { sys_admin } for pid=2103 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1647.198424] audit: type=1400 audit(1565077671.832:120563): avc: denied { sys_admin } for pid=2103 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1647.207953] audit: type=1400 audit(1565077671.842:120564): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1647.212430] audit: type=1400 audit(1565077671.852:120565): avc: denied { net_admin } for pid=2100 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1647.726087] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1647.726098] CPU: 0 PID: 16803 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1647.726117] ffff880125647888 ffffffff81b42e79 1ffff10024ac8f13 ffff8801d26a0000 [ 1647.726130] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801256479d0 [ 1647.726145] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1647.726148] Call Trace: [ 1647.726165] [] dump_stack+0xc1/0x128 [ 1647.726177] [] warn_alloc.cold.31+0x7f/0x9c [ 1647.726191] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1647.726202] [] ? depot_save_stack+0x11c/0x470 [ 1647.726216] [] ? save_stack_trace+0x16/0x20 [ 1647.726227] [] ? xt_alloc_table_info+0x70/0x100 [ 1647.726236] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1647.726245] [] ? nf_setsockopt+0x6d/0xc0 [ 1647.726254] [] ? check_preemption_disabled+0x3b/0x200 [ 1647.726263] [] __vmalloc_node_range+0x35e/0x600 [ 1647.726272] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1647.726280] [] vmalloc+0x5b/0x70 [ 1647.726287] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1647.726295] [] xt_alloc_entry_offsets+0x41/0x60 [ 1647.726304] [] translate_table+0x215/0x1690 [ 1647.726312] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1647.726321] [] ? compat_do_ip6t_get_ctl+0x940/0x940 07:48:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:29 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x1214c4, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = add_key(&(0x7f0000000040)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000400)="beb4d58b854699f98c01b93fc5dce0e54b7fe7b557fa80a08b7b687a825480579b6e435f2f5b55c18426f0308def948f13d1fc57e321854a15173d215bb3bb5897c30b31c23ed7d39c4f60268b19cae4f774c2d280190b5cd338c09cbaf22fae4d24f3807c8877d38343f9f9a62af1064af6ec44fcbf2e5c32219be8d21ee8e7f7c87d7f5f546cf09ffb7c35290dbd9413a94bed326412be6d3c215a53101082587f50484416223aa1670c0e6f42fba3c3ed274d10e94a6d46cdab13cb0da5edfa0edbfeba84109a1cf3964937ec9f9826bd3e11b1a21702089826e12d1c9760aefad78612669785ae5739938eeebf6e58b22664942dcc66c7605e7100694de5217b32473e8593da0e3332d7ba5d2fd63b42efadd48831bc105c50bbd990803e188f6f945773f5f988130173a968d5bcb6e74ec2a293730c5b3673a3d94ecc5101ebea9ab1998d1c1d1831fed820451aee0e11cfeb4690ca6c2509dcacd3dd4922f5b9bc4d4dd763d4c3c17f8b3fd676bda9b2aa14c2506b25b5a43f8403f3756b9153dfef3a2f23cb148a0f67f7008456af69e6fc968ff60867e144c005aa90f56643841299f7aadcd6acb7125742db5111cdb8b12add5b3d21aff7fd8525be5bb89f64b960ff8df8288b30b0ffa52ee9b4ffefa89fb3817347bac50fc0c66fc9b796853bb3ef94a356787496032d326e6aadca2560cd2b3434da888a233e8293c6166c0691eaabac4b445568c0e67f7c6aad4cd8b6e812837636371ce4848cd373fef322d3f56883203fb2316c51b9c7d1b14327166bfb5e01e473ee0d66a52f7835ba920fedf3a13e9776ece688a2f92e566918a25ae14dd21844ce733103cec399971685401dcb2564ceb88db929c80aab11b6cdee62de3c3d43d30b9671e40008e1066a84d59115e5312f1892074767e836007484443b0936e5c2224f974861e02c25d46a2c46688d6c5e8ae9a204b839c39d1df6cae39c7366a942068f004592494028fe619f361a5621ef8c70b548fc9b24e8bd32af94105d4e98e69cf667345f441490527cf07ce4d3cd54d91915a4c8e94e715dd1c5b0cb85a68686b2bfb2f1e1479b6e92414349cb85c70170ba13265551fe3178585e0f620daee08d586968d0e95005061ac06e23bc7cab491284af9539d6fd01a9016dcfc9ccffb49f57c3a9be9b1a5398947261ad7bbe5856ddc9e75e76b45400b097e039cbaa1d2b7594efab7c691580aad3a1fe496c46be716e1f4741517a1ce13e5f39ccd2b9379e0284acc67676e0afe7aca8c84d5932c2ab757a76df0b05b9bf7ffc6993f231029acf8e91a15d6d070e06073d3da55a31cc73b59ed6514f443a403bd40c98bd7486117481ca8da41cfea580b8c338b2efa70c9194231643769e591565f7010828ecd5530b894739a378544f1d3d4b604d30f5d30b98ba5d343de97e5d4a405c9ab662e1f94d337d7cc223c782d7987f77641cbea3d890423841cff04422ba0f1fcd8655def65903880e0e083c97958d471108846bc44cc1dfcf2eea2c4662df97c06284ce7a53791d9771fdfc3b6a616a7c2476ead04f2d201e969f300f856fc3e45ad20a23ff98561858c6b94815cb784e4bd8be00e04bb7c7b7268a1cdf44b1934214b0c471b9ce12abb0f293a36a7bc618f0a825785a539ef4124ef7c68fed54bb626d171ea27ba5a5089e63c1489a1a3c2a70de7475b1d682370a0c013ff14851b3d36afcb61efdc7f9659c1743ce2b54ffd75f07cbe8ef093cf29dc44194f61191662639fc74a5b7eb1cac5fea3e2960599747927e1f659ba4e6669f2c8c72046000520147ca92c8d2216203792037d458abdceaa7e326052957821d2ac9b88d1a20420eaa985a305c60f96bb7ab43b544888e8b6a61d7a7f5a433fecaed8c2698d6e8b4c8a5b39c83c4455b07a8810ed4e19f3f0344a33ef783affa1d534bc4bfe57c119277eca45da1a1c9999518355903827b5ea7b92506a746a07e3449389cddc41aa0badb8334d1d32e63f346cd1812b16d73279edc78b0a632fa2e2484b40afbbd0cccb54c70d1a74ea358d5b33216c118ce3a5bdf70b3bc8e37dd8ac6b994855e1e4952d4cba350ca72ad108f92054e86ddf47d3793cb1ed4b54653d81b764d3fb6b39598d1894bd086ec09708770712bf2bbf4a1217e0ede62850eb7f1fbf4b49a8d256cd8e18bc0d1f8ff28a33651a146820ace9cdfba1f780031ac5523398106a589a6bded8f350dd2d549223e37858549f16f9653620294a38096c1cdd0c72ee2b626c533f0934cfbe25f31309046e8058e32face04a1f5be0a620822151dbcc6686ac1cf1c2f72826f0a679875be49d446dce8805bb1e8661c6e14505c86046cb6c1629d3dd4e8903ccda3602985fa70e9c5af7a34b3c62456cb9b92662b8b0a989bd8b31b089c76529b6e855a29de2b62547d7f57161187b3a7bd55165a6ee7922298b8c8870785286285b975d116e500795ee883957b05ef254056760855f0a02e29276f894f7b5e438041eea89355a8a8e7c94fdabddba86bde9f8f14a79861fc3f844057797dc13928cf6f6a65700f5d77e5e2cbb21949b3fc0d3308c0434a043338f6fdeea3543084b52a046af6aec6985ab1d0c903e367b0487734fa2a01dd8b42b34d40bd03da2e08604ee7937e5a0d2bd21c20beff425f8331d8107bce61535cd17ec12d92630de40cbc01e3cb91c144ed46f82a108a2aaaa72057a405a23de2eb125c2c1b60f7a2dbc7e8dc14ac65959c08c174b6d4a48c14f12bad0d6d8af4d63b5b47332bac3bd26a702e49901e88ad395be73a1281eb96eda0cacfbff61e49f0ab2abc0cab40d17402270c99cadf5947bc51bec53f4ad3158cf169354b3217e789c2d20838f2c3e92ff3cd18dfd05969b77400134e7cfffb7448a2197a8e18f333938fda82a0b75d4f0377d1b0fc13773503447aceae2e8eb3b844da00c8af5578c3a9dcb94a9311fc3d7bded0520dac43427c70a6d2f5e1b7ff8f804fe42b38bdd3746ad721746af0eecb235b9a2116d24f75f4d523bdfadb0c00573c99eca31420e7a379b125775a1b496a400d7c497ef3dae886466613618a89897e5179fa19ce7432c9622f2c6a48139bf6a0e47fb5ddc3dd2dc76a09aa9e03d9df5629e803a4d3e70534d2fdf7b9df073c8e96ccf966a93b4dc2588e31d8990a603bb71fbbcbf1a2abf6aae0c1e6a7b84051cf3256c899d05c08c7d6e0b9e86f3608b341d7f81e612568cfce8676b719af7fe5dd0bdf8e6e9b9e1d4ff4c88ea5cbfbd8f6e00a106f98a8a5dd27d79d1f98d1a5297be63a4d3098fa2544e226108a79841afc5e66c934437f4474b431a2c3835d2b5a68e8e9322f52e8029c6ca4053fdb5d28a285fcb1957a88365fa8764a9fbfe813653f520a67361c0251eb0ba79cf29a9393899dc4458e226aeb6a773c1f649ebd5ed4e4b0adb9e5bba41f7da3370b6aedd3235e9eb04bd00a105022e42f2243fefc35247b419629566c269eddaaed253db9b8f1e58d15519d28f91004b2724aa703e7336b370ce279c51a33630e0d57f98cc9b7205a7e5a71fd695b4f4d81b04acc551c4c52170184c689e59a2b632c5e7228907338cfafb3f4654e04d31074b58ecdc2ee3a5afa7b93e3410d86bb41243e0a3aa96d098d7d3e59ad2e793433de1b1d915a2f9545a8f697933ee2c1515438f3e68e010cfd4d517bf0efe4c0406bba23a51308590c36dde97cd4da6ae6ee2d7121dbf61982dccfb54b755fa893d228b6d478b090efd1d97822056293f27ba340c1f2c1c4861f7a239b07bb13279ed70e584cf2d441dbaec66a3feb74dc61663a8d2e44beb6233682efd0b0e34fad6a44ca31939103d09991a0060f67e01772670d46f0ab8618228f8139ffc0c075b3ad8e15a388f15e9d7f35aaf156876a8fa660e590af67fec32f5b41df588c4bd47450fe866ee0e4fb86e8acc9479b7ebefe1f7e7c7f824a97617f857eab1909214f5657dd41794eb6ce45a42ebb13198975d3f7c03751b45b9a20d0a452b4a7ce7a58fd02fc3a651749b9e8e598f0fecfbdc888050f572c50afd7e50e141819ed094fee55d8edb636c0b2f8a32598398a1c480de3d6df82eef799fcbab776c67c9b0cc0f8450d4b6a7481464e55899de3974f7d1e8eb7c66ff811f3aa8c0fd9b6f07059ede70968458aae148cd5108504a0439ccc3748f60c5189ee9d17cf454a506dbd812dc0538fdb882fac0e0bf13267f560ab1cc863780fdb40c5f87b4556c571747d0caed7032d371e2b995353fe5072d3a3c5f2ddc814bb540e8f13e53f73560e9f756b0b1d40d3924c4a46606e3212004a5778f1351d6b18cf0d4697b4e37a6014a6d5ee70363f2a73a3e9d2c11335e46d2edea248c7d3f81778631600bde10a03a2b017ce8ffd2eddfc4c4171869ab27c5c6e37cf7298076a95e2bc54ec0a1ba007941eb6354903493b738a427d7c87be048be21c84c5850817da26074d0a8268dd5273652f041fb7fbdcb5d0b7457ac986c34ca418a2fa7b8134a4bb74f27e136437ae5d0337f4b5fbe147cc9d7e7266ea355be4367a92d5cc41cba8a9b34bf5d86e26df892663598305fcb66b2b63d604098f08db51e7d73fe034a807e0a5f09aeda1dc9a153ed3b8731f8617b83239032c29fa9e35f23153372a62579d65a7e5a0a0a33354a7c9ebf07a20cca19bcc5599a28e0d1184759bf7b0a43964a6924d271282d6247a80af24b8fec1296a0c9bbef77df2703eea33189c804f28d86c5f8d7c217e71c44e9ee2f2bc60a271ba6aa073472ad0dd866a4720b6c18520205d416abeb71f614e0514a1bb746a879a22522c7f36bbc8ae624494da98d459c9385342b06129f4411c31649cdb44cbbaba92ad0d8500a9726ca2ab2f29b4487703ebda955e0088936b80046283fdf88e6a91875d34e84608cd15ce501b8cd44a53a16b1c962f1db76e06cbe8f1b79722d55a5c1d7986e01bcf4a8198c32b24a9e44f74048a229f3d61ddc3cbf784fe34a8615d9aee8ebfcbe2912a0ff671a51a436c72b3a8b3c1c741d83ccba5f3699df0dbadf22d21f1bf98303aca8d8a23c88da9287d173cbd92818d2a1799990fc25bb09f225e16ea72fcf57a7d7036a677bb72c125b5109bd83d8717edf223cb9e5e3c5591ddd37f5362842166136f42e72576beb41abc1c27cccab553c9c2cf77994e768829d0ee6e949dc88435d47f2d7011c263bf602e6c983506a8107d4288a8da9b098359406ca53231217de6486e6bd1613c0bb4dea5bead1431c9db30a4e63bbb4c2d656b1d7528d5f06d9f9eff238847bda73731817c57574ccda34ad8d636bdefe21b373592940e19f3741f757449c08c22983ddbf7841b38dd3df4aa6d30f48ca7849d2171059838be7697626b57be60d2e243baac2a5dc78e68d8904f9f50a92e3b888e090d81e57ff1e9410b16bb3718917b75c495e7a6f6f16028d11db204cefe14fc73b53631f73f8aaab0fd8d3a379deaa2e61b7b9236a36faaa4e46d605ba742ef1068e96e8a57cbb13fffe088e5859c6a44dca4ee08ae3c9880c705ccc69f32b81e7d6eefb76f551d9fabd14caca3509e924d9b89aea0e11aec678fb5d3fe4a618534b556d0e9e9a11524fc197a47a8df4f97ef92c4efa0b30fdf198b0ce93a48ecdf64d6b6e9fc8ee650f9736c8fb4703117e3495bf439c1514f087e7870e694c61132f021276d822c18e61f19d65d5466f631e95dbe2fda072156468ccb0baa7ea2b344ed25b5f89647c5538d301709a175681c36b60502f4f3b5f34918eb11cf", 0x1000, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000100)='/selinux/checkreqprot\x00', &(0x7f0000000380)) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xffffffffffffffb8, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000001400)={0x8, 0x6, 0x0, [{0x7fffffff, 0x3ff, 0x3ff, 0x10000, 0xffff, 0x3f, 0x581053e6}, {0x3, 0x1ff, 0x4, 0xffffffffffffd064, 0x10000, 0x40, 0x3}, {0xfffffffffffffffe, 0x5, 0x2, 0x2, 0x5, 0xfffffffffffff801, 0x7}, {0x81, 0x5583, 0x20, 0x8, 0x1f, 0xea, 0x8001}, {0x4, 0x49, 0x7f89, 0x3f, 0x40, 0x71, 0x20}, {0x3, 0xa86, 0x3f, 0x9c0a, 0x2, 0x9, 0x124}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000140)=""/138, 0x8a}, {&(0x7f0000000200)=""/133, 0x85}], 0x3, 0x1f000000) [ 1647.726329] [] ? __check_object_size+0x248/0x38e [ 1647.726338] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1647.726347] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1647.726357] [] ? mutex_unlock+0x9/0x10 [ 1647.726365] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1647.726373] [] nf_setsockopt+0x6d/0xc0 [ 1647.726382] [] ipv6_setsockopt+0xc8/0x130 07:48:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1647.726391] [] tcp_setsockopt+0x88/0xe0 [ 1647.726399] [] sock_common_setsockopt+0x9a/0xe0 [ 1647.726407] [] SyS_setsockopt+0x166/0x260 [ 1647.726415] [] ? SyS_recv+0x40/0x40 [ 1647.726424] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1647.726432] [] ? SyS_clock_settime+0x220/0x220 [ 1647.726440] [] ? do_syscall_64+0x48/0x550 [ 1647.726447] [] ? SyS_recv+0x40/0x40 [ 1647.726455] [] do_syscall_64+0x19f/0x550 [ 1647.726463] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1647.726466] Mem-Info: [ 1647.726489] active_anon:69903 inactive_anon:328850 isolated_anon:0 [ 1647.726489] active_file:1691 inactive_file:3236 isolated_file:0 [ 1647.726489] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1647.726489] slab_reclaimable:7011 slab_unreclaimable:66414 [ 1647.726489] mapped:56149 shmem:334600 pagetables:16003 bounce:0 [ 1647.726489] free:987692 free_pcp:424 free_cma:0 07:48:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1a, &(0x7f0000000280)=0x1f, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) 07:48:30 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/softnet_stat\x00') r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) preadv(r1, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:48:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1647.726508] Node 0 active_anon:279612kB inactive_anon:1315400kB active_file:6764kB inactive_file:12944kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:224596kB dirty:64kB writeback:0kB shmem:1338400kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:48:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1647.726534] DMA32 free:3012904kB min:4696kB low:7712kB high:10728kB active_anon:64kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1996kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1176kB local_pcp:476kB free_cma:0kB 07:48:30 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='net/tcp6\x00', 0xfffffffffffffffa) keyctl$get_persistent(0x16, r1, r2) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0xfff, 0x4) preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) lowmem_reserve[]: 0 3505 3505 [ 1647.726564] Normal free:937864kB min:5580kB low:9168kB high:12756kB active_anon:279548kB inactive_anon:1315372kB active_file:6764kB inactive_file:12944kB unevictable:0kB writepending:64kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28044kB slab_unreclaimable:263660kB kernel_stack:22720kB pagetables:63788kB bounce:0kB free_pcp:520kB local_pcp:108kB free_cma:0kB 07:48:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) lowmem_reserve[]: 0 0 0 [ 1647.726623] DMA32: 110*4kB (UM) 70*8kB (UM) 68*16kB (UM) 90*32kB (UM) 87*64kB (UM) 74*128kB (UM) 77*256kB (UM) 75*512kB (UM) 66*1024kB (UM) 46*2048kB (UM) 677*4096kB (U) = 3012904kB Normal: 6087*4kB (UMEH) 6068*8kB (UMEH) 4321*16kB (UMEH) 3335*32kB (UMEH) 2434*64kB (UME) 1342*128kB (UM) 558*256kB (ME) 195*512kB (UM) 72*1024kB (UM) 16*2048kB (UM) 3*4096kB (U) = 937772kB 07:48:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 339527 total pagecache pages [ 1647.726682] 0 pages in swap cache [ 1647.726687] Swap cache stats: add 0, delete 0, find 0/0 [ 1647.726690] Free swap = 0kB [ 1647.726693] Total swap = 0kB [ 1647.726696] 1965979 pages RAM [ 1647.726699] 0 pages HighMem/MovableOnly [ 1647.726701] 313617 pages reserved [ 1648.224438] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1648.224449] CPU: 1 PID: 16818 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1648.224468] ffff88018cd2f888 ffffffff81b42e79 1ffff100319a5f13 ffff8801c3050000 07:48:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1648.224481] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88018cd2f9d0 [ 1648.224495] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1648.224497] Call Trace: [ 1648.224519] [] dump_stack+0xc1/0x128 [ 1648.224533] [] warn_alloc.cold.31+0x7f/0x9c [ 1648.224546] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1648.224557] [] ? depot_save_stack+0x11c/0x470 [ 1648.224570] [] ? save_stack_trace+0x16/0x20 [ 1648.224579] [] ? xt_alloc_table_info+0x70/0x100 [ 1648.224589] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1648.224597] [] ? nf_setsockopt+0x6d/0xc0 [ 1648.224605] [] ? check_preemption_disabled+0x3b/0x200 [ 1648.224614] [] __vmalloc_node_range+0x35e/0x600 07:48:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000005c0)=0xc) [ 1648.224623] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1648.224631] [] vmalloc+0x5b/0x70 [ 1648.224639] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1648.224647] [] xt_alloc_entry_offsets+0x41/0x60 [ 1648.224655] [] translate_table+0x215/0x1690 [ 1648.224664] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1648.224673] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1648.224681] [] ? __check_object_size+0x248/0x38e 07:48:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1648.224690] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1648.224699] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1648.224709] [] ? mutex_unlock+0x9/0x10 [ 1648.224717] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1648.224725] [] nf_setsockopt+0x6d/0xc0 [ 1648.224734] [] ipv6_setsockopt+0xc8/0x130 [ 1648.224742] [] tcp_setsockopt+0x88/0xe0 [ 1648.224752] [] sock_common_setsockopt+0x9a/0xe0 [ 1648.224760] [] SyS_setsockopt+0x166/0x260 [ 1648.224767] [] ? SyS_recv+0x40/0x40 [ 1648.224776] [] ? SyS_clock_gettime+0x11e/0x1f0 07:48:33 executing program 5: open(&(0x7f0000000280)='./file0\x00', 0x41, 0x0) r0 = creat(&(0x7f0000000180)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) rename(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./file0\x00') [ 1648.224784] [] ? SyS_clock_settime+0x220/0x220 [ 1648.224792] [] ? do_syscall_64+0x48/0x550 [ 1648.224800] [] ? SyS_recv+0x40/0x40 [ 1648.224807] [] do_syscall_64+0x19f/0x550 07:48:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1648.224816] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1648.224819] Mem-Info: [ 1648.224840] active_anon:69928 inactive_anon:328850 isolated_anon:0 [ 1648.224840] active_file:1691 inactive_file:3261 isolated_file:0 [ 1648.224840] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1648.224840] slab_reclaimable:7011 slab_unreclaimable:66389 [ 1648.224840] mapped:56149 shmem:334600 pagetables:16003 bounce:0 [ 1648.224840] free:956620 free_pcp:527 free_cma:0 [ 1648.224856] Node 0 active_anon:279712kB inactive_anon:1315400kB active_file:6764kB inactive_file:13044kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:224596kB dirty:64kB writeback:0kB shmem:1338400kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:48:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="b0af96dcd54b0c19ad1690f221506096e073dda5f8e2c0a246a5047ef3e3fb0daa7872541aa56c65e731037c6108619e86f633c910ffcc3770cfc4796bdffebf2bdaf621b35b2d4790caf89fdc8cd767ecba44bc6b4f4bcc2d6271c334034b4e3fa9b62f0bc6c3e4d291e6068cceed9fb4e5cf28aa217bb61097e24a4ffaae954d95b3583def4b25538e32ec74b6393af2981be58abca9eede9bdc393ec4c11af662c538550e422d8f3accc870ea99959dd4bfed24247faaaad185fb2ec55d51888c0ff3d6dbacbaca2cfb157ab786603443718650489a1e55dab9ac498295ac1c2479230229a2266b0f5db7e5b6dc83f220cfb5d7ff54", 0xf7}], 0x1, &(0x7f0000000240)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}], 0x18}, 0x800) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000000)='syz0\x00') tkill(r3, 0x3c) [ 1648.224876] DMA32 free:3012904kB min:4696kB low:7712kB high:10728kB active_anon:64kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1996kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1176kB local_pcp:700kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 07:48:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1648.224906] Normal free:813576kB min:5580kB low:9168kB high:12756kB active_anon:279648kB inactive_anon:1315372kB active_file:6764kB inactive_file:13044kB unevictable:0kB writepending:64kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28044kB slab_unreclaimable:263560kB kernel_stack:22496kB pagetables:63788kB bounce:0kB free_pcp:932kB local_pcp:504kB free_cma:0kB 07:48:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:34 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:useradd_exec_t:s0\x00', 0x24) ftruncate(r1, 0x108200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, 0x0, 0x408000fffffffe) sendfile(r1, r2, 0x0, 0x100000000) lowmem_reserve[]: 0 0 0 [ 1648.224973] DMA32: 110*4kB (UM) 70*8kB (UM) 68*16kB (UM) 90*32kB (UM) 87*64kB (UM) 74*128kB (UM) 77*256kB (UM) 75*512kB (UM) 66*1024kB (UM) 46*2048kB (UM) 677*4096kB (U) = 3012904kB Normal: 5962*4kB (UMEH) 5943*8kB (UMEH) 4220*16kB (MEH) 3247*32kB (UMEH) 2372*64kB (ME) 1295*128kB (M) 521*256kB (ME) 172*512kB (UM) 31*1024kB (M) 0*2048kB 0*4096kB = 813568kB 339527 total pagecache pages [ 1648.225027] 0 pages in swap cache [ 1648.225031] Swap cache stats: add 0, delete 0, find 0/0 [ 1648.225034] Free swap = 0kB [ 1648.225036] Total swap = 0kB [ 1648.225038] 1965979 pages RAM [ 1648.225041] 0 pages HighMem/MovableOnly [ 1648.225043] 313617 pages reserved [ 1650.486086] binder: 16846:16858 got transaction with invalid data ptr [ 1650.486119] binder: 16846:16858 transaction failed 29201/-14, size 8192-0 line 3155 [ 1650.621754] binder: undelivered TRANSACTION_ERROR: 29201 [ 1651.005312] input: syz1 as /devices/virtual/input/input49 [ 1651.246008] input: syz1 as /devices/virtual/input/input50 [ 1652.222076] audit_printk_skb: 1506 callbacks suppressed [ 1652.222090] audit: type=1400 audit(1565077676.862:121068): avc: denied { net_admin } for pid=16882 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1652.222129] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1652.222141] CPU: 0 PID: 16888 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1652.222158] ffff88019abff888 ffffffff81b42e79 1ffff1003357ff13 ffff88010d6b8000 [ 1652.222172] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019abff9d0 [ 1652.222185] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1652.222187] Call Trace: [ 1652.222203] [] dump_stack+0xc1/0x128 [ 1652.222214] [] warn_alloc.cold.31+0x7f/0x9c [ 1652.222224] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1652.222234] [] ? depot_save_stack+0x11c/0x470 [ 1652.222247] [] ? save_stack_trace+0x16/0x20 [ 1652.222256] [] ? xt_alloc_table_info+0x70/0x100 [ 1652.222266] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1652.222274] [] ? nf_setsockopt+0x6d/0xc0 [ 1652.222283] [] ? check_preemption_disabled+0x3b/0x200 [ 1652.222292] [] __vmalloc_node_range+0x35e/0x600 [ 1652.222302] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1652.222309] [] vmalloc+0x5b/0x70 07:48:35 executing program 2: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6, 0xffffffffffffff7f, 0x4}) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r1, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:48:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r3, 0x402, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000001480)={0x4, 0x42, &(0x7f0000001400)="f7bb5995b75d9ed18c6e00a7185d1b24115adaa3cad1103cde300003ab9684281cefacb4b73be48f4f0584ae70396eeb1d18d159114f3ab99baa450c3debc32395d9"}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000014c0), 0x200000000000037c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000015c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020008800000000d00000080ffffffff000000000000004000b0efa864f494f317808d11e3c9652838130a32a6eb60cff26d6182d5d5ede10a6e7b7286f08072b44be83abbc354e1f15b490202acd1a2a292b2b684eabde29ba445f4442da30fa3183c482999fe45dd4913aac600135ad007fdb57b7623e66ff5035f1c05919aae9a196b1c2956386b311b8434ea8b35375bf287d465f2b3083a"], 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000001340)={'filter\x00', 0x0, 0x4, 0x1000, [], 0x1, &(0x7f0000000300)=[{}], &(0x7f0000000340)=""/4096}, &(0x7f00000013c0)=0x78) ptrace$setopts(0x4206, r4, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) wait4(0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) tkill(r4, 0x3c) [ 1652.222316] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1652.222323] [] xt_alloc_entry_offsets+0x41/0x60 [ 1652.222331] [] translate_table+0x215/0x1690 07:48:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000300)=0x6ad) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) wait4(r2, &(0x7f0000000100), 0x4000000d, 0x0) getpeername$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000400), &(0x7f0000000640)=0xc) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000440)={0x18, 0xfffffffffffffffe, 0x7, {0x10001}}, 0x18) r3 = socket$inet6(0xa, 0x80100000006, 0xb98) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000007e00), 0x40000000000025d, 0x0) r4 = dup3(r0, r0, 0x80000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x10c, r5, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x73f7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x61a23f6a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc010}, 0x8000) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r6, 0x28, &(0x7f0000000240)}, 0x10) 07:48:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:35 executing program 5: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, r1+30000000}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000000)="767e9d8fbcc988c1b4ef4cf32448724a7dc547c4f6240230ceca59d73df5752dd66347097b90148f60b308c5563020e13d3e01a30aeff3ec330927eaeba0a4c7b041d6a0e6533a51e4e566fb26d00d66653b2857627c16ea87ddd72114c9f1b1d4a71ad12e145dee66eba2f425d50d71d4cf58588742954295f4c917f189416b06627d579dc4b178f35138cdd923b5d4195a98b9b9705dba73cdebe923156ca2486e92d6fb9c90ff157182c3ce59d3e099388cc6912342092bce96ce687c28427b9017544204f447a8390460191fd6ae7701dbf11395dab3abfeb8a5f84efc19fd630e0fa0f392859e05b26f22068aa68f89551c782d88bf58c0c108b5000bb7") read(r0, &(0x7f00000030c0)=""/4096, 0x1000) [ 1652.222338] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1652.222346] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1652.222354] [] ? __check_object_size+0x248/0x38e [ 1652.222362] [] do_ip6t_set_ctl+0x2ce/0x470 07:48:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x38) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000280)=0x400100000001, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) wait4(r2, 0x0, 0x1, &(0x7f00000001c0)) connect$inet6(r1, &(0x7f0000000080), 0x1c) r3 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38effffffff0000000000a300c30800004016017cfd3dc08c020000800000000d00000080ffffffff000000000000004000b0efa864f494f317457e"], 0x1) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000000)) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x3c) ioctl$TCSETXF(r3, 0x5434, &(0x7f0000000100)={0x67f5, 0x7f, [0xcbb, 0x7, 0x2, 0x20, 0xfffffffffffffffb], 0x80000009}) [ 1652.222369] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1652.222378] [] ? mutex_unlock+0x9/0x10 [ 1652.222386] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1652.222393] [] nf_setsockopt+0x6d/0xc0 [ 1652.222400] [] ipv6_setsockopt+0xc8/0x130 07:48:36 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000bafe522e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00"/656], 0x290) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) set_robust_list(&(0x7f0000000140)={&(0x7f0000000100)={&(0x7f0000000000)}, 0xa5a}, 0x18) [ 1652.222408] [] tcp_setsockopt+0x88/0xe0 [ 1652.222417] [] sock_common_setsockopt+0x9a/0xe0 [ 1652.222423] [] SyS_setsockopt+0x166/0x260 [ 1652.222431] [] ? SyS_recv+0x40/0x40 07:48:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1652.222439] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1652.222447] [] ? SyS_clock_settime+0x220/0x220 07:48:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = gettid() tgkill(r1, 0x0, 0x7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000532000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000279000/0x2000)=nil) mremap(&(0x7f0000413000/0x11000)=nil, 0x11000, 0x4000, 0x3, &(0x7f0000aab000/0x4000)=nil) [ 1652.222454] [] ? do_syscall_64+0x48/0x550 [ 1652.222461] [] ? SyS_recv+0x40/0x40 [ 1652.222468] [] do_syscall_64+0x19f/0x550 [ 1652.222476] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1652.222480] Mem-Info: [ 1652.222500] active_anon:70232 inactive_anon:328856 isolated_anon:0 [ 1652.222500] active_file:1759 inactive_file:3554 isolated_file:0 [ 1652.222500] unevictable:0 dirty:41 writeback:0 unstable:0 [ 1652.222500] slab_reclaimable:7007 slab_unreclaimable:66173 [ 1652.222500] mapped:56461 shmem:334601 pagetables:16050 bounce:0 07:48:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r2, 0x0, 0xa, &(0x7f0000000040)='ppp1user^\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x4, 0x800, 0x1ff, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x401, 0x2, 0x5, 0x0, 0x1d6, 0x3, 0x6, 0x401, 0xfffffffffffffffd, 0x80000000, 0x7fff, 0x6, 0x4, 0xd0, 0xf63c, 0x6, 0x3, 0x13b9f75, 0x1, 0x101, 0x8000, 0x9, 0x1, 0x3, 0x9, 0x1, 0x1, 0x2, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x1, 0x104, 0x3, 0x4, 0x5, 0x0, 0x23}, r3, 0xe, r2, 0x2) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[], 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x3c) [ 1652.222500] free:1083225 free_pcp:438 free_cma:0 07:48:36 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000bafe522e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00"/656], 0x290) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) set_robust_list(&(0x7f0000000140)={&(0x7f0000000100)={&(0x7f0000000000)}, 0xa5a}, 0x18) [ 1652.222515] Node 0 active_anon:280928kB inactive_anon:1315424kB active_file:7036kB inactive_file:14216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:225844kB dirty:164kB writeback:0kB shmem:1338404kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1652.222535] DMA32 free:3012904kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1996kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1180kB local_pcp:476kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1652.222562] Normal free:1319996kB min:5580kB low:9168kB high:12756kB active_anon:280868kB inactive_anon:1315396kB active_file:7036kB inactive_file:14216kB unevictable:0kB writepending:164kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28028kB slab_unreclaimable:262696kB kernel_stack:22752kB pagetables:63976kB bounce:0kB free_pcp:572kB local_pcp:328kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1652.222619] DMA32: 110*4kB (UM) 70*8kB (UM) 68*16kB (UM) 90*32kB (UM) 87*64kB (UM) 74*128kB (UM) 77*256kB (UM) 75*512kB (UM) 66*1024kB (UM) 46*2048kB (UM) 677*4096kB (U) = 3012904kB Normal: 13451*4kB (UMEH) 8906*8kB (UMEH) 5594*16kB (UMEH) 4828*32kB (UMEH) 3153*64kB (UME) 1909*128kB (UM) 832*256kB (UME) 318*512kB (UM) 84*1024kB (UM) 15*2048kB (U) 3*4096kB (U) = 1320028kB 339938 total pagecache pages [ 1652.222673] 0 pages in swap cache [ 1652.222677] Swap cache stats: add 0, delete 0, find 0/0 [ 1652.222680] Free swap = 0kB [ 1652.222682] Total swap = 0kB [ 1652.222684] 1965979 pages RAM [ 1652.222696] 0 pages HighMem/MovableOnly [ 1652.222699] 313617 pages reserved [ 1652.230434] audit: type=1400 audit(1565077676.872:121069): avc: denied { sys_admin } for pid=2104 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1652.232069] audit: type=1400 audit(1565077676.872:121070): avc: denied { sys_admin } for pid=2104 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1652.237201] audit: type=1400 audit(1565077676.872:121071): avc: denied { sys_admin } for pid=2104 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1652.243271] audit: type=1400 audit(1565077676.882:121072): avc: denied { sys_admin } for pid=2099 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1652.296166] audit: type=1400 audit(1565077676.882:121073): avc: denied { sys_admin } for pid=2099 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1652.323077] audit: type=1400 audit(1565077676.962:121074): avc: denied { sys_admin } for pid=2104 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:48:38 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/tcp6\x00') preadv(r2, &(0x7f00000017c0), 0x3cc, 0x1f000000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x6233784, 0x1, 0x7, 0x4, 0x9}, 0xc) 07:48:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x100000000003d) 07:48:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000000040)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) 07:48:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:38 executing program 1: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x4, 0x300) ioctl$int_out(r1, 0x5462, &(0x7f0000000b80)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, &(0x7f0000000000)) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, &(0x7f0000000200)="844eb8991ce8", 0x6, 0x40, &(0x7f0000000740)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000000c0)={0x2000000}) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x800) bind$packet(r2, &(0x7f0000000280)={0x11, 0x17, 0x0, 0x1, 0x8, 0x6, @local}, 0x14) setxattr$trusted_overlay_nlink(0x0, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U-', 0x4}, 0x28, 0x0) sendto$inet(r3, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bind(r0, &(0x7f0000000a80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x0, 0x0, 0x0, 0x3}}, 0x80) write$binfmt_script(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c65300aea205486396972100d97c042b2cd9252689db19239dfa5606e6635ddee806b5f917ba77a9d73c005f1d65ab06dcefc57551c9d41fbc241e44552829a60768e93d001671f3effb1f1ef21e12e108339e01432fb49132d56cd027b2e1c17a9f416e5f982e0e6a5627c7c8622d30435d28ff9ac41074a89eb0a605441116a309995c5280c53b4ba8527106e7275ab7b1b7dfc2e916adc640c7a441cb0d319c93a8c46bf6b74171178be3dc9d4069c500000000000a6524126f1fdaf7dd82c4e83ec0d0ebe5be42ed339023388576a9a57c7b60600f45e9602e1d2ea4470ece86713678f239e277019b632afc6e09aa720c7620b36940af961f0ccc09c9b5d907ae86b75c3b9f26fcd4e9cdf9a941f3d3a1114b5cfa5432d36bbd84a3407c901385764a5697cbd85e5092ccf5a054450daf8a436f2a98a00076381db30872f54d3d8be1c803cd3f0a3134ec8b4977cdb1f95e90d0294f2d9d53b70c425e0c0b175ffdb8a43ee659f31793971ee7b56b2141f1ea0da7f7bebc0a221234c5cf78bf9edae73082e8c2d16d443d7b0b515d7015bf19b844c202cb510ffff2158bc5e7a51432573c5d5842504bd6ac17200535a53ff3b2c8f6d88eca4a2644ac91970d1ca2db0e6361a19e9606bdaa3892320d499b2a82743d51374c501d8d0cbfa078883e070404db9c97b4734affa8da72fe3927026094ddaa41ee7b840ea941c99f795cef5e0b1d1168c2fa632a4105eaf445d0e0cd5248bad0bf5b73a8e2d53df88e5494f952d8fe9ccba0ea6b54d397195ba248b004090b82857bb0cf593f200e8fb0300e2bb157d0e31cff09c2b98f55761c08cf6d32c9cdb98494d7c56187514597f7bbc438ce3b55fb08d6437746343ebd89aec4a7f863c9865e2b27008bfbc4439a8478292b291ef7979590e0583d607cb899548c98610c645cf5848f1a1ea61277852e44473db56bff0dfd6f6752cf5c30600000000000000de8ce0505e8ab69b19fa7067c68a0601eb32e23a79b9fa008fc3e75729acf724096b42a1d484dc5efdb00c39240c0b71b81c7636695a0caae6dd34dc573cf173afcb7889d5c14e6ed5338492f654f201817a77dadb046bace06e9eee9bea92cb87abcd83c41b2db3b45f174a7daaba729067ddb040ed96a4a533c600c8eb0042651150a50028bd8618e9f243728b129c4c0b52403edfa4ffa2aa53d4cc45703c0585a625f9e5e5c3b0381a10dc81c637eb157f32cdb431e829f405694750c3d616910918a51e93bfc3a7bb847709c20765c73895d94ad8747a1a1a5249e045622f5b2edd5adde47abf0000000000000000000000000000e705353846b00f6a6d37978b20580f4577d80fe5d93f3683e6582e7b99d99ae21798207b90d4c60429964750c3cc37b134a24f5154f39caa6b88adbbaa2dc694e584b704952e4f35ca9c8365334496d9ec95c39e75deb4ec07a1cd91dbf26cb6b022ba06bad349137d7f6a2dfdcb270d8524cb4fb49f8d53878c1d7c7ec6a5e4196b1c5f9e0176055b6efd372ffe7ddc2f4e0381e4f543be54b18b2f8df25e7e9df4827af586b56a304083804f08dc4bff33e8f49bc485c02c"], 0x3c1) setsockopt$sock_int(r3, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) r4 = socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r4, 0x0, 0x24fec5a70f1488f9) [ 1652.397123] audit: type=1400 audit(1565077677.032:121075): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1652.425774] audit: type=1400 audit(1565077677.062:121076): avc: denied { sys_admin } for pid=2101 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:48:38 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x14) sendto$inet6(r0, 0x0, 0x0, 0x8005, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000000000)=0x80000000000503, 0x13) sendto$inet6(r0, &(0x7f0000003f40)="6857673780a937d35577694b45ce851aa6ed5412f3e00cf6925f01b061ac39839c26ca80866a4d3e22e9b37204d75cd01a00b6d7896c153aa213f59d97d7b245275b79d66f46bec6e19d15118115c1a73cde083afb4f432935214c7a69390e474224bcb03fe94cbf157eff4d03e0f787d3362e71f5c54e5e7d6c19cc0dded998afb7760d26a2f94049cc8f01fb5cd90468b61d9ce823662d28fca9b38c5b4b870a3ff1e398a8575781a0c3ccd965bb9353bca69e8a1efc8d9561069070ec9869e9c4c99c582e150fa27a610689a77c35c234d8b6a0e66548ffda63d168e5bfc265acba50b8501640520c739f2fe1ec7b9d6a617e6a80f1789d3d79109041c473cea85b4bd6699a92517efdbfe223cee775177881020288766979087c37e8e3e84c5703a26613e073ec205f283c010b090a22dfab86cd8604030cca7b72faa3d11ac7b37b07a0188d2b81c2b9a2d0fa703a121cb9d38ca393ed4e3b6f2754c589d640f72b5a721668f81e08b44e0d4c12472d7afdcde3c5990d944b8e4201c95db176bc9d1abbb46572aa82aba23bc14c3432e6858a63929f403e25135330d04ee8cd7a070f9c335ecaa8a9033ebbb85d9fda9496484217f463c78ed24ce9f8f6bd62b3e4d154a87e51b20502b67c3c905cbc6b71a154e93c513af85e4d4c4b55ddb990964b5183a89c88d1c0d48ee53fc12c0cfc075dab7ffcf3649b8ba2f7848c96bff88b9ea2afafda5ef58eff460936e6a33f941d313caebc3338d67e67fa7d42ce0c2d6ffdb0c2188ad71788482c5e26a0ea81fa0f0c17b3e1c872177e69c273a7acdce8b44c4380320ef44085921baaeb8fc6526c2b1cce4e315c699662c8a24a9c620a60f80a5799803dac6e6b772b53eb0b6668a8c7f9cf6a618891e93811ad01681a21e883c10650669ed2e45e684d460930f65779674819825480e8a7ad0855cc4829743c554fa62815d70d2cf008755652c5697f1722123d4d03fb825c8ad48095022d72631592b34470cc2cebd4a9aa1fb325ea6b7e13e09014ec48d3c992139b953309e03bf4bb2650b40cfb5578b9b17faba5463b5d1c1f15f07fb30fa5a45fb52c20bfbf3e0047354b4132344a16882c3710b66acfe127682fceff82fc6eaa2cd3b60fc3bde052b32a2f56f96ff293b8fc8a26e9f2bdd64aadd91976593a973b62188b5211aa5f921bd423f1122dcd61528abd91c350b8b4533b76f6c2f861e5beaa1a8d31552b510c7940234c9feb81ca7113d4d0692094bbc37bcdbafeecda55c927220b6b6c919b0b17bc34cfee1f25f44d3d784a0a70edac11e454e622be22d83b21eaea7dc4bbfbc367dbe26fdc17c277c477faed9fad4e241c62e76dbabd8887cc71208a5f4a28fd5958b8452e10c1bef257947ca12242e989ef655f8525d06d16204ea2dc481e2e5853f5a53ad5712ef48f248c75388186036514ed0f4a544e497a19d47db5ca134958e7bc5319f3af910c27f93df3aef517069ebe067ee916b8204b1eb8c5ec3a71235158e77e0eaf6e11092ca891e3bfec44c1753b54845ce7bd80a2160cd9e5157eb7e51637557d26deb3a1e31fb1931b7cb0cf7c102ce9b320c296c1ea39dfb68bdf2a9d947bde5364afbc25cf4e484c51bc9c9b44e2fbebeb58b14df3e164654eb50ef8f208abf09423ead5540eb3c4991d843b62a6275c31b9d09d8b9798a1aaa7534edbf0276d7e5480df8c5d455fcae64367e76e5bf80123695916d9a20f28c9501682b757f12df9b173985bd6fec173d92db1d1c80e59f66660008b8f2f93205bb7fe8d18879974cf8a83f62784249c1e1a772ac1d51ca4fc9aa12989fc5ab7da578e62776187c71ccfff1155e7caede9e9c67c0941445098c56ade829ec12552e4f1ea672999b0600b0098b6cc84bee68bf05e49a42a385ae0b58d3938a6f64021e09bc0ba03dd969395c0e98bbadd6c1237f715bb2625e9ed2452e6de3204dd068dc697b895472bc690eabbdc24350cfe54a43e9b34b762e7552548b83fe47498266acbeea8c2a35e260c58bda0e5f070117e5bbc9af3", 0x5ad, 0x0, 0x0, 0x0) [ 1652.427720] audit: type=1400 audit(1565077677.062:121077): avc: denied { sys_admin } for pid=2101 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1653.090104] syz-executor.4: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1653.090114] CPU: 1 PID: 16928 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1653.090141] ffff88019d737888 ffffffff81b42e79 1ffff10033ae6f13 ffff8801c394c740 [ 1653.090155] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019d7379d0 07:48:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x701, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r2, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1653.090169] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1653.090171] Call Trace: [ 1653.090190] [] dump_stack+0xc1/0x128 [ 1653.090202] [] warn_alloc.cold.31+0x7f/0x9c [ 1653.090213] [] ? zone_watermark_ok_safe+0x250/0x250 07:48:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 07:48:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) dup2(r0, r0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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") r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) listen(r0, 0x1040) tkill(r3, 0x3c) [ 1653.090221] [] ? depot_save_stack+0x11c/0x470 07:48:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1653.090230] [] ? save_stack_trace+0x16/0x20 [ 1653.090239] [] ? xt_alloc_table_info+0x70/0x100 [ 1653.090248] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1653.090259] [] ? nf_setsockopt+0x6d/0xc0 [ 1653.090269] [] ? check_preemption_disabled+0x3b/0x200 [ 1653.090276] [] __vmalloc_node_range+0x35e/0x600 [ 1653.090284] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1653.090291] [] vmalloc+0x5b/0x70 07:48:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca\x0f.?\xad\xae\x0f\xb5\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal\x17\xea\xa0\xcf\xd5\x15\x06;w\xf8\xf8\x03?v\xe8$\xfc\xf0\xb8\xda=\x8aWT2\x99?$\xb7FW\x19\xa0\xdb\x00\x00\x00\x00\xac\xbd') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed] ? xt_alloc_entry_offsets+0x41/0x60 [ 1653.090305] [] xt_alloc_entry_offsets+0x41/0x60 [ 1653.090313] [] translate_table+0x215/0x1690 [ 1653.090321] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1653.090329] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1653.090337] [] ? __check_object_size+0x248/0x38e [ 1653.090345] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1653.090352] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1653.090362] [] ? mutex_unlock+0x9/0x10 [ 1653.090369] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1653.090376] [] nf_setsockopt+0x6d/0xc0 07:48:40 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0xffffffffffffff1d, 0x0, 0x10a, 0x0, 0x18}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1653.090384] [] ipv6_setsockopt+0xc8/0x130 [ 1653.090391] [] tcp_setsockopt+0x88/0xe0 [ 1653.090399] [] sock_common_setsockopt+0x9a/0xe0 [ 1653.090406] [] SyS_setsockopt+0x166/0x260 [ 1653.090413] [] ? SyS_recv+0x40/0x40 [ 1653.090421] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1653.090429] [] ? SyS_clock_settime+0x220/0x220 [ 1653.090436] [] ? do_syscall_64+0x48/0x550 [ 1653.090442] [] ? SyS_recv+0x40/0x40 07:48:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1653.090449] [] do_syscall_64+0x19f/0x550 [ 1653.090457] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1653.090460] Mem-Info: 07:48:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1653.090481] active_anon:70408 inactive_anon:328875 isolated_anon:0 [ 1653.090481] active_file:1782 inactive_file:3576 isolated_file:0 [ 1653.090481] unevictable:0 dirty:54 writeback:0 unstable:0 [ 1653.090481] slab_reclaimable:7007 slab_unreclaimable:66160 [ 1653.090481] mapped:56442 shmem:334619 pagetables:16019 bounce:0 [ 1653.090481] free:1083058 free_pcp:531 free_cma:0 07:48:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1653.090499] Node 0 active_anon:281632kB inactive_anon:1315500kB active_file:7128kB inactive_file:14304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:225768kB dirty:216kB writeback:0kB shmem:1338476kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:48:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x9, 0x1, 0x1, &(0x7f0000000040)=[0x0, 0x0], 0x2}, 0x20) r3 = dup2(r1, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000180)={0x2000}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) tkill(r4, 0x3c) [ 1653.090520] DMA32 free:3012904kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1996kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1180kB local_pcp:704kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1653.090545] Normal free:1319328kB min:5580kB low:9168kB high:12756kB active_anon:281572kB inactive_anon:1315472kB active_file:7128kB inactive_file:14304kB unevictable:0kB writepending:216kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28028kB slab_unreclaimable:262644kB kernel_stack:22656kB pagetables:63852kB bounce:0kB free_pcp:944kB local_pcp:312kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1653.090596] DMA32: 110*4kB (UM) 70*8kB (UM) 68*16kB (UM) 90*32kB (UM) 87*64kB (UM) 74*128kB (UM) 77*256kB (UM) 75*512kB (UM) 66*1024kB (UM) 46*2048kB (UM) 677*4096kB (U) = 3012904kB Normal: 13228*4kB (UMEH) 8906*8kB (UMEH) 5594*16kB (UMEH) 4832*32kB (UMEH) 3155*64kB (UME) 1909*128kB (UM) 832*256kB (UME) 318*512kB (UM) 84*1024kB (UM) 15*2048kB (U) 3*4096kB (U) = 1319392kB 07:48:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 339977 total pagecache pages [ 1653.090648] 0 pages in swap cache [ 1653.090652] Swap cache stats: add 0, delete 0, find 0/0 07:48:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1653.090654] Free swap = 0kB [ 1653.090656] Total swap = 0kB [ 1653.090659] 1965979 pages RAM [ 1653.090661] 0 pages HighMem/MovableOnly [ 1653.090663] 313617 pages reserved [ 1654.831766] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) 07:48:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1654.831778] CPU: 0 PID: 16958 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1654.831795] ffff8801c2cdf888 ffffffff81b42e79 1ffff1003859bf13 ffff8801a73d97c0 [ 1654.831809] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801c2cdf9d0 [ 1654.831822] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 07:48:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000040)) r3 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x3c) [ 1654.831824] Call Trace: 07:48:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1654.831840] [] dump_stack+0xc1/0x128 [ 1654.831850] [] warn_alloc.cold.31+0x7f/0x9c [ 1654.831859] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1654.831867] [] ? depot_save_stack+0x11c/0x470 [ 1654.831877] [] ? save_stack_trace+0x16/0x20 [ 1654.831886] [] ? xt_alloc_table_info+0x70/0x100 [ 1654.831895] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1654.831902] [] ? nf_setsockopt+0x6d/0xc0 [ 1654.831910] [] ? check_preemption_disabled+0x3b/0x200 [ 1654.831917] [] __vmalloc_node_range+0x35e/0x600 [ 1654.831926] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1654.831932] [] vmalloc+0x5b/0x70 [ 1654.831939] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1654.831946] [] xt_alloc_entry_offsets+0x41/0x60 [ 1654.831954] [] translate_table+0x215/0x1690 07:48:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1654.831961] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1654.831970] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1654.831977] [] ? __check_object_size+0x248/0x38e [ 1654.831985] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1654.831993] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1654.832002] [] ? mutex_unlock+0x9/0x10 [ 1654.832009] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1654.832016] [] nf_setsockopt+0x6d/0xc0 [ 1654.832025] [] ipv6_setsockopt+0xc8/0x130 [ 1654.832032] [] tcp_setsockopt+0x88/0xe0 [ 1654.832040] [] sock_common_setsockopt+0x9a/0xe0 [ 1654.832047] [] SyS_setsockopt+0x166/0x260 [ 1654.832053] [] ? SyS_recv+0x40/0x40 [ 1654.832062] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1654.832069] [] ? SyS_clock_settime+0x220/0x220 [ 1654.832076] [] ? do_syscall_64+0x48/0x550 [ 1654.832083] [] ? SyS_recv+0x40/0x40 07:48:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) preadv(r1, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1654.832089] [] do_syscall_64+0x19f/0x550 [ 1654.832096] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 07:48:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1654.832099] Mem-Info: [ 1654.832117] active_anon:70501 inactive_anon:328866 isolated_anon:0 [ 1654.832117] active_file:1782 inactive_file:3576 isolated_file:0 [ 1654.832117] unevictable:0 dirty:55 writeback:0 unstable:0 [ 1654.832117] slab_reclaimable:7003 slab_unreclaimable:66173 [ 1654.832117] mapped:56503 shmem:334617 pagetables:16121 bounce:0 [ 1654.832117] free:1082949 free_pcp:371 free_cma:0 07:48:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040), 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x3c) [ 1654.832135] Node 0 active_anon:282004kB inactive_anon:1315464kB active_file:7128kB inactive_file:14304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:226012kB dirty:220kB writeback:0kB shmem:1338468kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:48:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1654.832158] DMA32 free:3012904kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1996kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1180kB local_pcp:476kB free_cma:0kB 07:48:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000300)={0x1000, 0x36, 0x6, 0x2, 0x6, 0x6}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) preadv(r1, &(0x7f00000017c0), 0x49ebe43b8c2416d, 0x1f000000) r2 = request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='net/tcp6\x00', 0xfffffffffffffffe) fcntl$setlease(r1, 0x400, 0x3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r2, 0x33, 0x2a}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'cmac(twofish)\x00'}}, &(0x7f0000000240)="1bb088a857bb28cb58166a8f71ac4fa892c91ee33c6fa18c551b112c5d5c4addd7ef41e6cf0216bd7ec6943861d3f29710050f", &(0x7f0000000280)=""/42) 07:48:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) lowmem_reserve[]: 0 3505 3505 [ 1654.832184] Normal free:1318892kB min:5580kB low:9168kB high:12756kB active_anon:281944kB inactive_anon:1315436kB active_file:7128kB inactive_file:14304kB unevictable:0kB writepending:220kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28012kB slab_unreclaimable:262696kB kernel_stack:22848kB pagetables:64260kB bounce:0kB free_pcp:304kB local_pcp:220kB free_cma:0kB 07:48:45 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3223}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa860f494f317"], 0x1) ptrace$setopts(0x4206, r5, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x3c) 07:48:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') lowmem_reserve[]: 0 0 0 [ 1654.832243] DMA32: 110*4kB (UM) 70*8kB (UM) 68*16kB (UM) 90*32kB (UM) 87*64kB (UM) 74*128kB (UM) 77*256kB (UM) 75*512kB (UM) 66*1024kB (UM) 46*2048kB (UM) 677*4096kB (U) = 3012904kB Normal: 13151*4kB (UMEH) 8912*8kB (UMEH) 5593*16kB (UMEH) 4806*32kB (UMEH) 3157*64kB (UME) 1910*128kB (UM) 833*256kB (UME) 318*512kB (UM) 84*1024kB (UM) 15*2048kB (U) 3*4096kB (U) = 1318796kB 339975 total pagecache pages [ 1654.832296] 0 pages in swap cache [ 1654.832299] Swap cache stats: add 0, delete 0, find 0/0 [ 1654.832301] Free swap = 0kB [ 1654.832303] Total swap = 0kB [ 1654.832305] 1965979 pages RAM [ 1654.832308] 0 pages HighMem/MovableOnly [ 1654.832309] 313617 pages reserved [ 1654.874229] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) 07:48:46 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) unshare(0x10000000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1654.874241] CPU: 0 PID: 16960 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1654.874260] ffff88010e33f888 ffffffff81b42e79 1ffff10021c67f13 ffff8801a73dc740 [ 1654.874273] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88010e33f9d0 07:48:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1654.874286] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1654.874289] Call Trace: [ 1654.874304] [] dump_stack+0xc1/0x128 [ 1654.874317] [] warn_alloc.cold.31+0x7f/0x9c [ 1654.874331] [] ? zone_watermark_ok_safe+0x250/0x250 07:48:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1654.874341] [] ? depot_save_stack+0x11c/0x470 [ 1654.874351] [] ? save_stack_trace+0x16/0x20 [ 1654.874359] [] ? xt_alloc_table_info+0x70/0x100 [ 1654.874368] [] ? do_ip6t_set_ctl+0x235/0x470 07:48:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000400)={@initdev, 0x0}, &(0x7f0000000440)=0x14) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="f8e99925405dfd87f9bc60f5a42e7ffc018cdd3abd031ac7f4cd7f49e87f4355a5bd9a4e79b064dba65aeb27348934ea267c9cec83a47070ebf11988eba943ea614f603fa9e681dc076d96ceb75c01fbd3a3a03e08a342636041cc8d700387a12e743d5dd9e382d402d547a5dc75f27fb147e3eb21a61e91fe95a42919fd12c92622879b33195d4e54d02fed6ec21b15f1a94c260b4ec2ffff50c43747c612952f3009448e7fe7e58bd8496252ff69fe12d86728ee367abc70230145bd3df7fedced20730aba7d7985e1934d367607b3b6c86bc2888f7a49cbfc57b59784096669f18fdbbc", 0xe5}, {&(0x7f0000000200)="3fcbe3d0d493e125b3e4d6493a9f52bac26eae99ab4f95c0eebbf60ce7b4cd9bef41b1e8dbb9176c1b92d4f14151388a450d9d5c3e2d8e3d4b377dcab2f74be8e0f862bfbb59d96162b3af5099266eecf70da6", 0x53}], 0x2, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0x2, 0x1, 0x100000000, [{[@broadcast], 0x8000}, {[], 0x2}, {[@empty], 0x10000}, {[], 0x400}, {[@dev={0xac, 0x14, 0x14, 0x18}], 0x80}, {[@multicast1], 0x276}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @local}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x200, [@broadcast, @broadcast, @local]}, @rr={0x7, 0xf, 0xffffffffffffff84, [@multicast1, @loopback, @multicast2]}, @ssrr={0x89, 0xb, 0x80, [@rand_addr=0x8001, @multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x75258a78}}], 0x150}, 0x8000) r5 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c0000000040000000df03b38e000000000000000000a3000000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r5, 0x0, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)) wait4(0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0xc, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 'sed\x00', 0x1c, 0x7, 0x67}, 0x2c) tkill(r5, 0x3c) [ 1654.874375] [] ? nf_setsockopt+0x6d/0xc0 [ 1654.874384] [] ? check_preemption_disabled+0x3b/0x200 07:48:46 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200000) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001b00)={&(0x7f0000001ac0)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000001b40)={0xda, 0x2, 0xfffffffffffffff8}) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/165, 0xa5}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f00000002c0)=""/204, 0xcc}], 0x4, &(0x7f0000000400)=""/106, 0x6a}, 0x1}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/241, 0xf1}, {&(0x7f0000001580)=""/75, 0x4b}, {&(0x7f0000001600)=""/85, 0x55}, {&(0x7f0000001680)=""/33, 0x21}, {&(0x7f00000016c0)=""/231, 0xe7}, {&(0x7f00000017c0)=""/249, 0xf9}], 0x7, &(0x7f0000001940)=""/177, 0xb1}, 0xfffffffffffffff8}], 0x2, 0x2, &(0x7f0000001a80)) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r2, &(0x7f00000017c0), 0x3cc, 0x1f000000) chroot(&(0x7f0000000040)='./file0\x00') [ 1654.874392] [] __vmalloc_node_range+0x35e/0x600 07:48:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1654.874401] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1654.874408] [] vmalloc+0x5b/0x70 [ 1654.874416] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1654.874424] [] xt_alloc_entry_offsets+0x41/0x60 [ 1654.874433] [] translate_table+0x215/0x1690 [ 1654.874441] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1654.874450] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1654.874459] [] ? __check_object_size+0x248/0x38e [ 1654.874467] [] do_ip6t_set_ctl+0x2ce/0x470 07:48:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0x110, 0x110, 0x0, 0x0, 0x248, 0x248, 0x248, 0x248, 0x248, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf0, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@empty, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff000000, 0xffffffff, 0x0, 0xffffffff], 'netdevsim0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x2f, 0x4, 0x2, 0x1}, 0x0, 0xc8, 0x138}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3f, 0xbe4, 0x9, 0x0, 0x0, "76c30f9bcb7883dfce15d67ce7920a6c749fd6ea719cda432cc0642b8d4c7df883c8c52e68690f4153e19fdfd78c4500389cee569e1b7ee0b1d86c2505c4ec62"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) [ 1654.874484] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1654.874498] [] ? mutex_unlock+0x9/0x10 [ 1654.874509] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 07:48:47 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000340)}], 0x3}}], 0x0, 0x0) r2 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01007300d8000000490927030000000000020000000002004b01fa36d7d1070b41f8a32f95f13bd04551469b0e40c53cb64b66a8439bd175f89e3521ae0c79"], 0x0, 0x41}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1654.874520] [] nf_setsockopt+0x6d/0xc0 [ 1654.874534] [] ipv6_setsockopt+0xc8/0x130 [ 1654.874543] [] tcp_setsockopt+0x88/0xe0 [ 1654.874555] [] sock_common_setsockopt+0x9a/0xe0 [ 1654.874567] [] SyS_setsockopt+0x166/0x260 [ 1654.874575] [] ? SyS_recv+0x40/0x40 [ 1654.874586] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1654.874594] [] ? SyS_clock_settime+0x220/0x220 07:48:47 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r1, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) tkill(r0, 0x1000000000016) [ 1654.874603] [] ? do_syscall_64+0x48/0x550 [ 1654.874610] [] ? SyS_recv+0x40/0x40 [ 1654.874617] [] do_syscall_64+0x19f/0x550 [ 1654.874626] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 07:48:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 1654.874630] Mem-Info: [ 1654.874650] active_anon:70501 inactive_anon:328866 isolated_anon:0 [ 1654.874650] active_file:1782 inactive_file:3576 isolated_file:0 [ 1654.874650] unevictable:0 dirty:55 writeback:0 unstable:0 [ 1654.874650] slab_reclaimable:7003 slab_unreclaimable:66173 [ 1654.874650] mapped:56503 shmem:334617 pagetables:16121 bounce:0 [ 1654.874650] free:1082917 free_pcp:351 free_cma:0 07:48:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1654.874666] Node 0 active_anon:282004kB inactive_anon:1315464kB active_file:7128kB inactive_file:14304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:226012kB dirty:220kB writeback:0kB shmem:1338468kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:48:48 executing program 2: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x800) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f0000000140)=""/11, 0xb}, {&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/43, 0x2b}, {&(0x7f00000012c0)=""/80, 0x50}, {&(0x7f0000001340)=""/165, 0xa5}], 0x7, 0x0) r1 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2ccc0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0x1f6}], 0x3}}], 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES64, @ANYBLOB="af038a94fb8e7584ee264696fe3816fc8ca2df3bcf536f"], 0x0, 0x1f}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x34) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x0, 0x0) [ 1654.874686] DMA32 free:3012904kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1996kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1180kB local_pcp:476kB free_cma:0kB 07:48:48 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000340)}], 0x3}}], 0x0, 0x0) r2 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01007300d8000000490927030000000000020000000002004b01fa36d7d1070b41f8a32f95f13bd04551469b0e40c53cb64b66a8439bd175f89e3521ae0c79"], 0x0, 0x41}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) lowmem_reserve[]: 0 3505 3505 [ 1654.874714] Normal free:1318764kB min:5580kB low:9168kB high:12756kB active_anon:281944kB inactive_anon:1315436kB active_file:7128kB inactive_file:14304kB unevictable:0kB writepending:220kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28012kB slab_unreclaimable:262696kB kernel_stack:22944kB pagetables:64260kB bounce:0kB free_pcp:224kB local_pcp:180kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1654.874783] DMA32: 110*4kB (UM) 70*8kB (UM) 68*16kB (UM) 90*32kB (UM) 87*64kB (UM) 74*128kB (UM) 77*256kB (UM) 75*512kB (UM) 66*1024kB (UM) 46*2048kB (UM) 677*4096kB (U) = 3012904kB Normal: 13151*4kB (UMEH) 8912*8kB (UMEH) 5593*16kB (UMEH) 4803*32kB (UMEH) 3157*64kB (UME) 1910*128kB (UM) 833*256kB (UME) 318*512kB (UM) 84*1024kB (UM) 15*2048kB (U) 3*4096kB (U) = 1318700kB 07:48:49 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r1, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) tkill(r0, 0x1000000000016) 339975 total pagecache pages [ 1654.874845] 0 pages in swap cache [ 1654.874851] Swap cache stats: add 0, delete 0, find 0/0 [ 1654.874856] Free swap = 0kB [ 1654.874860] Total swap = 0kB [ 1654.874864] 1965979 pages RAM 07:48:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1654.874869] 0 pages HighMem/MovableOnly [ 1654.874874] 313617 pages reserved [ 1657.250557] audit_printk_skb: 1689 callbacks suppressed [ 1657.250567] audit: type=1400 audit(1565077681.892:121642): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1657.261778] audit: type=1400 audit(1565077681.902:121643): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:48:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1657.263813] audit: type=1400 audit(1565077681.902:121644): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1657.270100] audit: type=1400 audit(1565077681.912:121645): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1657.272069] audit: type=1400 audit(1565077681.912:121646): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1657.273902] audit: type=1400 audit(1565077681.912:121647): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1657.275807] audit: type=1400 audit(1565077681.912:121648): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1657.277570] audit: type=1400 audit(1565077681.912:121649): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1657.282114] audit: type=1400 audit(1565077681.922:121650): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1657.283555] audit: type=1400 audit(1565077681.922:121651): avc: denied { dac_override } for pid=17018 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1662.258804] audit_printk_skb: 1788 callbacks suppressed [ 1662.258812] audit: type=1400 audit(1565077686.892:122248): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1662.260752] audit: type=1400 audit(1565077686.902:122249): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1662.262472] audit: type=1400 audit(1565077686.902:122250): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:48:50 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r1, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) tkill(r0, 0x1000000000016) [ 1662.264847] audit: type=1400 audit(1565077686.902:122251): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1662.266590] audit: type=1400 audit(1565077686.902:122252): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1662.275448] audit: type=1400 audit(1565077686.912:122253): avc: denied { dac_override } for pid=17120 comm="syz-executor.4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1662.280324] audit: type=1400 audit(1565077686.922:122254): avc: denied { sys_admin } for pid=2102 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:48:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f511000000000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f31700"/86], 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x3, {{0x2, 0x4e23, @local}}, 0x0, 0x1, [{{0x2, 0x4e24, @broadcast}}]}, 0x110) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) [ 1662.282195] audit: type=1400 audit(1565077686.922:122255): avc: denied { sys_admin } for pid=2102 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1662.317339] audit: type=1400 audit(1565077686.952:122256): avc: denied { dac_override } for pid=17120 comm="syz-executor.4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:48:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1662.339049] audit: type=1400 audit(1565077686.982:122257): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1663.376614] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) 07:48:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1663.376625] CPU: 0 PID: 17149 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1663.376643] ffff880192c37888 ffffffff81b42e79 1ffff10032586f13 ffff8801d71ec740 [ 1663.376657] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff880192c379d0 [ 1663.376671] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1663.376672] Call Trace: [ 1663.376691] [] dump_stack+0xc1/0x128 [ 1663.376705] [] warn_alloc.cold.31+0x7f/0x9c [ 1663.376716] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1663.376725] [] ? depot_save_stack+0x11c/0x470 [ 1663.376735] [] ? save_stack_trace+0x16/0x20 [ 1663.376744] [] ? xt_alloc_table_info+0x70/0x100 [ 1663.376753] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1663.376760] [] ? nf_setsockopt+0x6d/0xc0 [ 1663.376767] [] ? check_preemption_disabled+0x3b/0x200 [ 1663.376775] [] __vmalloc_node_range+0x35e/0x600 [ 1663.376784] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1663.376791] [] vmalloc+0x5b/0x70 [ 1663.376798] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1663.376813] [] xt_alloc_entry_offsets+0x41/0x60 [ 1663.376826] [] translate_table+0x215/0x1690 [ 1663.376836] [] ? debug_lockdep_rcu_enabled+0x77/0x90 07:48:52 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x8) [ 1663.376845] [] ? compat_do_ip6t_get_ctl+0x940/0x940 07:48:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) ioctl$sock_SIOCADDDLCI(r2, 0x8980, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) [ 1663.376853] [] ? __check_object_size+0x248/0x38e 07:48:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) tkill(r1, 0x1000000000016) [ 1663.376861] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1663.376869] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1663.376878] [] ? mutex_unlock+0x9/0x10 07:48:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1663.376887] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1663.376894] [] nf_setsockopt+0x6d/0xc0 [ 1663.376903] [] ipv6_setsockopt+0xc8/0x130 [ 1663.376911] [] tcp_setsockopt+0x88/0xe0 07:48:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1663.376920] [] sock_common_setsockopt+0x9a/0xe0 [ 1663.376928] [] SyS_setsockopt+0x166/0x260 [ 1663.376934] [] ? SyS_recv+0x40/0x40 [ 1663.376944] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1663.376953] [] ? SyS_clock_settime+0x220/0x220 07:48:52 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x11, 0x1000) preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1663.376961] [] ? do_syscall_64+0x48/0x550 07:48:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1663.376968] [] ? SyS_recv+0x40/0x40 [ 1663.376975] [] do_syscall_64+0x19f/0x550 07:48:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)=@buf={0xf, &(0x7f0000000040)="cb9351756b6315af02be5a2cb26585"}) pwrite64(r1, &(0x7f0000000140)="2597ed5f80c37f7b1225fec3b9d26c70b546ae90c861f13c426196fb385addeb20e6ddd60a3ef383eeb2bdfdb2ded7223da4943b8e956cd723fcb6aa5000b62b61de1c8c243ed178894649bb6b5879601823f83de960b5afd7cbcce02e19129b3d20006b45f7fe4b7cdd5cb861bb917e8628681d76b7580124acd5353044e86aaa8e82ee87e349f09ec09a4f6be79dbbc3659a87ece853c708ac396db3d69d9eee301257ac63ba1d43f1be1285b855d453ce406e33b8be021fffcec8c0184ab3aa60d8a519222efb8441fd1cf07831c219bc0d04724054a9fb1f000bac1bd4e713dccc7100f0daa6b5a8febf161a31d8cf1ae0", 0xf3, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000002c0)=""/153) connect$inet6(r1, &(0x7f0000000080), 0x1c) dup2(r1, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000380)) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) [ 1663.376984] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1663.376988] Mem-Info: [ 1663.377008] active_anon:70494 inactive_anon:328837 isolated_anon:0 [ 1663.377008] active_file:1866 inactive_file:3727 isolated_file:0 [ 1663.377008] unevictable:0 dirty:169 writeback:9 unstable:0 [ 1663.377008] slab_reclaimable:7011 slab_unreclaimable:66196 [ 1663.377008] mapped:56540 shmem:334601 pagetables:16099 bounce:0 [ 1663.377008] free:1082608 free_pcp:491 free_cma:0 [ 1663.377024] Node 0 active_anon:281976kB inactive_anon:1315348kB active_file:7464kB inactive_file:14908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:226160kB dirty:676kB writeback:36kB shmem:1338404kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:48:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='clear_refs\x00') preadv(r1, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1663.377044] DMA32 free:3012904kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1996kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1180kB local_pcp:476kB free_cma:0kB 07:48:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) tkill(r1, 0x1000000000016) lowmem_reserve[]: 0 3505 3505 [ 1663.377073] Normal free:1317528kB min:5580kB low:9168kB high:12756kB active_anon:281916kB inactive_anon:1315320kB active_file:7464kB inactive_file:14908kB unevictable:0kB writepending:712kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28044kB slab_unreclaimable:262788kB kernel_stack:22656kB pagetables:64172kB bounce:0kB free_pcp:784kB local_pcp:576kB free_cma:0kB 07:48:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') lowmem_reserve[]: 0 0 0 [ 1663.377132] DMA32: 110*4kB (UM) 70*8kB (UM) 68*16kB (UM) 90*32kB (UM) 87*64kB (UM) 74*128kB (UM) 77*256kB (UM) 75*512kB (UM) 66*1024kB (UM) 46*2048kB (UM) 677*4096kB (U) = 3012904kB Normal: 12880*4kB (UMEH) 8749*8kB (UMEH) 5528*16kB (UMEH) 4840*32kB (UMEH) 3171*64kB (UME) 1908*128kB (UM) 833*256kB (UME) 317*512kB (UM) 85*1024kB (UM) 15*2048kB (U) 3*4096kB (U) = 1317608kB 07:48:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 340206 total pagecache pages 07:48:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) clock_gettime(0x0, &(0x7f0000005240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/122, 0x7a}, {&(0x7f00000010c0)=""/104, 0x68}, {&(0x7f0000001140)=""/49, 0x31}, {&(0x7f0000001180)=""/17, 0x11}], 0x5}, 0x7f}, {{&(0x7f0000001240)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000025c0)=[{&(0x7f00000012c0)=""/48, 0x30}, {&(0x7f0000001300)=""/179, 0xb3}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/168, 0xa8}, {&(0x7f0000002480)=""/175, 0xaf}, {&(0x7f0000002540)=""/79, 0x4f}], 0x6, &(0x7f0000002640)=""/51, 0x33}, 0x200000000}, {{&(0x7f0000002680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002700)=""/203, 0xcb}, {&(0x7f0000002800)=""/147, 0x93}, {&(0x7f00000028c0)=""/187, 0xbb}, {&(0x7f0000002980)=""/153, 0x99}, {&(0x7f0000002a40)=""/119, 0x77}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/101, 0x65}, {&(0x7f0000002b40)=""/137, 0x89}, {&(0x7f0000002c00)=""/246, 0xf6}, {&(0x7f0000002d00)=""/197, 0xc5}], 0xa, &(0x7f0000002ec0)=""/170, 0xaa}, 0x6}, {{&(0x7f0000002f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003100)=[{&(0x7f0000003000)=""/197, 0xc5}], 0x1}, 0xfffffffffffffffa}, {{&(0x7f0000003140)=@l2, 0x80, &(0x7f00000032c0)=[{&(0x7f00000031c0)=""/189, 0xbd}, {&(0x7f0000003280)=""/30, 0x1e}], 0x2, &(0x7f0000003300)=""/249, 0xf9}, 0x101}, {{0x0, 0x0, &(0x7f0000003400), 0x0, &(0x7f0000003440)=""/207, 0xcf}, 0xeb50}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003540)=""/65, 0x41}, {&(0x7f00000035c0)=""/161, 0xa1}, {&(0x7f0000003680)=""/8, 0x8}, {&(0x7f00000036c0)=""/192, 0xc0}, {&(0x7f0000003780)=""/32, 0x20}, {&(0x7f0000004880)=""/201, 0xc9}, {&(0x7f00000037c0)=""/20, 0x14}], 0x7, &(0x7f0000004a00)=""/68, 0x44}, 0x9}, {{&(0x7f0000004a80)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004b00)=""/170, 0xaa}, {&(0x7f0000003800)=""/56, 0x38}, {&(0x7f0000004bc0)=""/56, 0x38}, {&(0x7f0000004c00)=""/58, 0x3a}], 0x4, &(0x7f0000004c80)=""/152, 0x98}, 0x3f}, {{&(0x7f0000004d40)=@x25={0x9, @remote}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004dc0)=""/171, 0xab}, {&(0x7f0000004e80)=""/43, 0x2b}], 0x2, &(0x7f0000004f00)=""/253, 0xfd}, 0x10001}], 0x9, 0x2, &(0x7f0000005280)={r1, r2+30000000}) [ 1663.377189] 0 pages in swap cache [ 1663.377193] Swap cache stats: add 0, delete 0, find 0/0 [ 1663.377195] Free swap = 0kB [ 1663.377197] Total swap = 0kB [ 1663.377200] 1965979 pages RAM [ 1663.377202] 0 pages HighMem/MovableOnly [ 1663.377204] 313617 pages reserved [ 1663.413185] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1663.413194] CPU: 0 PID: 17150 Comm: syz-executor.0 Not tainted 4.9.141+ #1 07:48:54 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x701, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r2, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1663.413207] ffff88019adcf888 ffffffff81b42e79 1ffff100335b9f13 ffff8801914e0000 [ 1663.413217] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019adcf9d0 [ 1663.413225] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1663.413227] Call Trace: [ 1663.413242] [] dump_stack+0xc1/0x128 [ 1663.413251] [] warn_alloc.cold.31+0x7f/0x9c [ 1663.413260] [] ? zone_watermark_ok_safe+0x250/0x250 07:48:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) tkill(r1, 0x1000000000016) [ 1663.413268] [] ? depot_save_stack+0x11c/0x470 [ 1663.413276] [] ? save_stack_trace+0x16/0x20 [ 1663.413284] [] ? xt_alloc_table_info+0x70/0x100 [ 1663.413293] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1663.413301] [] ? nf_setsockopt+0x6d/0xc0 [ 1663.413309] [] ? check_preemption_disabled+0x3b/0x200 [ 1663.413317] [] __vmalloc_node_range+0x35e/0x600 [ 1663.413326] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1663.413332] [] vmalloc+0x5b/0x70 [ 1663.413339] [] ? xt_alloc_entry_offsets+0x41/0x60 07:48:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1663.413346] [] xt_alloc_entry_offsets+0x41/0x60 [ 1663.413354] [] translate_table+0x215/0x1690 [ 1663.413361] [] ? debug_lockdep_rcu_enabled+0x77/0x90 07:48:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) r2 = gettid() fgetxattr(r1, &(0x7f0000000040)=@random={'btrfs.', '\x00'}, &(0x7f0000000080)=""/11, 0xb) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net\x00') fchdir(r0) exit(0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000000c0)) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 1663.413369] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1663.413377] [] ? __check_object_size+0x248/0x38e [ 1663.413384] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1663.413392] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1663.413402] [] ? mutex_unlock+0x9/0x10 [ 1663.413409] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1663.413416] [] nf_setsockopt+0x6d/0xc0 [ 1663.413425] [] ipv6_setsockopt+0xc8/0x130 07:48:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)=0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x130, r0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101301, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) fchownat(r3, &(0x7f00000000c0)='./file0\x00', r4, r5, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000002c0)="57b7e3c43300", 0x6}], 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000000)={0x7}) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) [ 1663.413433] [] tcp_setsockopt+0x88/0xe0 [ 1663.413442] [] sock_common_setsockopt+0x9a/0xe0 [ 1663.413449] [] SyS_setsockopt+0x166/0x260 [ 1663.413456] [] ? SyS_recv+0x40/0x40 [ 1663.413464] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1663.413471] [] ? SyS_clock_settime+0x220/0x220 [ 1663.413479] [] ? task_stopped_code+0x140/0x140 [ 1663.413486] [] ? do_syscall_64+0x48/0x550 [ 1663.413492] [] ? SyS_recv+0x40/0x40 07:48:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000ffff000000000000000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) [ 1663.413499] [] do_syscall_64+0x19f/0x550 [ 1663.413506] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1663.413510] Mem-Info: [ 1663.413528] active_anon:70494 inactive_anon:328837 isolated_anon:0 [ 1663.413528] active_file:1866 inactive_file:3727 isolated_file:0 [ 1663.413528] unevictable:0 dirty:169 writeback:9 unstable:0 [ 1663.413528] slab_reclaimable:7011 slab_unreclaimable:66196 [ 1663.413528] mapped:56565 shmem:334601 pagetables:16099 bounce:0 [ 1663.413528] free:1082608 free_pcp:483 free_cma:0 07:48:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r1, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r1) tkill(0x0, 0x1000000000016) [ 1663.413543] Node 0 active_anon:281976kB inactive_anon:1315348kB active_file:7464kB inactive_file:14908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:226260kB dirty:676kB writeback:36kB shmem:1338404kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:48:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1663.413561] DMA32 free:3012904kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1996kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1180kB local_pcp:476kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1663.413587] Normal free:1317528kB min:5580kB low:9168kB high:12756kB active_anon:281916kB inactive_anon:1315320kB active_file:7464kB inactive_file:14908kB unevictable:0kB writepending:712kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28044kB slab_unreclaimable:262788kB kernel_stack:22720kB pagetables:64172kB bounce:0kB free_pcp:752kB local_pcp:548kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1663.413642] DMA32: 110*4kB (UM) 70*8kB (UM) 68*16kB (UM) 90*32kB (UM) 87*64kB (UM) 74*128kB (UM) 77*256kB (UM) 75*512kB (UM) 66*1024kB (UM) 46*2048kB (UM) 677*4096kB (U) = 3012904kB Normal: 12880*4kB (UMEH) 8749*8kB (UMEH) 5528*16kB (UMEH) 4838*32kB (UMEH) 3171*64kB (UME) 1908*128kB (UM) 833*256kB (UME) 317*512kB (UM) 85*1024kB (UM) 15*2048kB (U) 3*4096kB (U) = 1317544kB 340206 total pagecache pages [ 1663.413694] 0 pages in swap cache [ 1663.413698] Swap cache stats: add 0, delete 0, find 0/0 [ 1663.413700] Free swap = 0kB [ 1663.413702] Total swap = 0kB [ 1663.413704] 1965979 pages RAM [ 1663.413706] 0 pages HighMem/MovableOnly [ 1663.413708] 313617 pages reserved [ 1666.541655] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1666.541666] CPU: 1 PID: 17232 Comm: syz-executor.0 Not tainted 4.9.141+ #1 07:48:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000000)=0x3ff, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000140)=0x33, 0x4) r2 = gettid() sendmsg$nl_netfilter(r0, &(0x7f0000000840)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x6a4, 0x7, 0x8, 0x405, 0x70bd27, 0x25dfdbfb, {0xb, 0x0, 0x4}, [@nested={0x4, 0x3}, @generic="e811c6dffeb74945e42a83e6e15845a29ab30b1b48dd3d", @nested={0xc, 0x86, [@typed={0x8, 0x37, @ipv4=@rand_addr=0x101}]}, @typed={0x4, 0x91}, @typed={0x34, 0x4e, @binary="ddeb13544183f49f6f8e11c4b28eba86e41e338cb559bea6c35539fde5275b6102f98e19a42e503dab7396bc1ea6"}, @nested={0x190, 0x5f, [@generic="d5206864ea3777ffdab98cc2c7b3a868883ff958d851ee6d8b78ec0059aa33165c7f00eda5c01cf8a77b2b6681cd94fefc0e39a07a977af69b337f00e2a48d1de0b02fcfb00f2329eef9e4fac89c0d44fe51e5ce7fa59c6e9f35719dcb9b930ecf75fc47a74acfef39dea9b15fa9c09901fc7822e5f4181c87bc9be59fc6f5558ae3cf1c2d79ab72af1cd9feb53c3974330f3e3bead7d7f5918f125e13ec4ec525760d65", @generic="563005f8d1e76d23c9f435f33dacf2e4a5a205882d9a5c16da8909e065ca7fb4bc3f4b04c65764e3f03fc311f0910865033900df163a16c9722bc3fa5ed1343136b2a0fdc61b3c232f232030175fedc0e7d2a429b9a6579828adba6c09d7d61d4a88d21837e3579aad96ef110ea1a77d601e7ac4bebbd9691a71f1177e15bef06f7e5bb5d9551d086891d9e7079521395eef251d05038aab88be0ed1", @generic="60fae6b06f35c926401f9bb8b040ccf624b43e8da4b4530100e07c57f120bf608e351fd03cac70146113c87447dac69b187a6e270ae81f57a6b80d398290b92adf745b5ee6c45e0756"]}, @nested={0xe8, 0x68, [@typed={0x4, 0x64}, @generic="ac240a81c09865b54ad0c5e2d7b1293596d1c482b1c5d5e74a1a882e5df8a0356faa1d712dce2822cdf396d4d051b3b6eb94da1c8b0827d4d8d08fbfaf481d2a63fd1c6f0e14c577067a1a126eebbc577b7b5b3559b246b8f1961adc17c99470bc27cfeff218c835bfc6bde2291a6e677c265be36ca6b4fca806cf84687472bb47b25a49f72c36a3a5399ba30ea30b110f98fbe05ea18fbe0e63f62432ed08c94c5541351f1f7b2c77f1e6010798b9077c4246ca163f031c9a7743f6fe6dcb4f6c67fb69892076afca71adce19ae0bd19657a42bbd93c861ec9be394bff6"]}, @typed={0x8, 0x61, @pid=r2}, @nested={0x3b0, 0x21, [@typed={0x8, 0x68, @str='\x00'}, @generic="da5ab3817b82670579a947b718503595ad5c959fb41cb55bda943f915d84ad3ef8cc3f32a5b6199485d435a072fb119e4550469f0984ed2bb16c28ce4e4f9a4662bfafa885513e5b7c3e4f4be29485222b3cd716714273e48e3ee99f24", @generic="8365e47abf7e1d52c10a193daa78fbf92d003f7b7a22751e35bfe0094b222fb8a58eb16bd2be685389f65e7bcd75bb269475da6ad255afa0d12c4bbc2b047fd1a61efc23def6d617c26fa3ee69e3d98b85044e0f308adab1f0ebd3dcf461055012be41f5a4147932890a46d016db7b37f5c588611d4c7564e526b3600cbc977ad0f70ed44183e5139e9216613c15b098a23a46892e062c161029efaa0bc1ef997c4d79a04c", @typed={0x8, 0x6f, @str='\x00'}, @generic="41b69a52a3b2eabea9cbe0c47d6f73f8ae1a2344c044f9ece5496bbd30ceb1f71fa700140058e4dc8cd87fade40bba9e92c2734b15258b51964dc65b765447cb92da192d1c07a148d10c7afa3a6dfc01baed236ba87a5f036c50eaff77f09eed12d8b81f52c26c288a6b79a11ec62196134ccbd52c0aca9afd95544a0490761d711a1bdc93b68612ce8ae13a322d0e90ecd9be12061b4d878116dd4a37c33d38d83ba88a46d3e93f92e082ac0f4b4cc131384bf8412d1646b7499a", @generic="188dc65d1887347a3b6490c842111fdc2e602c70c05886737d2294beae4c568933ed32072e8bae5ff4d34c815b90dd1093214791c7bf3492526fb9c04bc40c33f490709fba80162e6a0f5b20e91c738aef48895b64a5243a0a8fea675ea926690b578c6e11bcd34cfaad438810b2972df7e6189a4edb74c8c2d001c3c1bc2f67875115ccdfc20c06bb737b021c2436d108c84614411fa7c64f586121410fa797039cb6d7a37e463dbaf161f0fe28f74430d193c9f24da426f80c9b867c17e66f0dc0a09839f787993399e84c309aadc3401ea2c2597659d106d2f4631004666f0525012f4da3a14504edacaca682ce9da8b8f85758fa4c51ed", @typed={0xc, 0x2d, @u64=0x5b}, @generic="7953bb90ab846085c66c102bd8b731058469a695b79833821f602ab2bf394d983d80f3748557cb29dd454e1e03e23c305ae716e15ea252d16b78b020662e641bc69cd7ca75e9358418ec0a20753b26379b201139135165d6d0c98b4aed6a9ca7fed97a1d78df980f53245b65625ce95839a854d27380141fc765eb9db76cdbc2b35a387ce1289ecb93a1c421f8523b21c6dca2d18c497fe167e5d19285f82342e5bf7f1b8fb1b6d91b63c33f2aa03bccad2ef7a93b4f7894ddf2a6890384e51b346023a10d9f8313e34e1d13ebc9e6afa8a6eff48fd2f8bcf076"]}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) sendto$inet6(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000880), 0x4) preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) [ 1666.541685] ffff8801c5117888 ffffffff81b42e79 1ffff10038a22f13 ffff8801a41ec740 [ 1666.541698] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801c51179d0 07:48:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r1, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r1) tkill(0x0, 0x1000000000016) [ 1666.541712] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1666.541714] Call Trace: [ 1666.541732] [] dump_stack+0xc1/0x128 [ 1666.541743] [] warn_alloc.cold.31+0x7f/0x9c [ 1666.541758] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1666.541766] [] ? depot_save_stack+0x11c/0x470 [ 1666.541775] [] ? save_stack_trace+0x16/0x20 [ 1666.541785] [] ? xt_alloc_table_info+0x70/0x100 [ 1666.541799] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1666.541811] [] ? nf_setsockopt+0x6d/0xc0 07:48:58 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) clock_gettime(0x0, &(0x7f0000005240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/122, 0x7a}, {&(0x7f00000010c0)=""/104, 0x68}, {&(0x7f0000001140)=""/49, 0x31}, {&(0x7f0000001180)=""/17, 0x11}], 0x5}, 0x7f}, {{&(0x7f0000001240)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000025c0)=[{&(0x7f00000012c0)=""/48, 0x30}, {&(0x7f0000001300)=""/179, 0xb3}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/168, 0xa8}, {&(0x7f0000002480)=""/175, 0xaf}, {&(0x7f0000002540)=""/79, 0x4f}], 0x6, &(0x7f0000002640)=""/51, 0x33}, 0x200000000}, {{&(0x7f0000002680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002700)=""/203, 0xcb}, {&(0x7f0000002800)=""/147, 0x93}, {&(0x7f00000028c0)=""/187, 0xbb}, {&(0x7f0000002980)=""/153, 0x99}, {&(0x7f0000002a40)=""/119, 0x77}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/101, 0x65}, {&(0x7f0000002b40)=""/137, 0x89}, {&(0x7f0000002c00)=""/246, 0xf6}, {&(0x7f0000002d00)=""/197, 0xc5}], 0xa, &(0x7f0000002ec0)=""/170, 0xaa}, 0x6}, {{&(0x7f0000002f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003100)=[{&(0x7f0000003000)=""/197, 0xc5}], 0x1}, 0xfffffffffffffffa}, {{&(0x7f0000003140)=@l2, 0x80, &(0x7f00000032c0)=[{&(0x7f00000031c0)=""/189, 0xbd}, {&(0x7f0000003280)=""/30, 0x1e}], 0x2, &(0x7f0000003300)=""/249, 0xf9}, 0x101}, {{0x0, 0x0, &(0x7f0000003400), 0x0, &(0x7f0000003440)=""/207, 0xcf}, 0xeb50}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003540)=""/65, 0x41}, {&(0x7f00000035c0)=""/161, 0xa1}, {&(0x7f0000003680)=""/8, 0x8}, {&(0x7f00000036c0)=""/192, 0xc0}, {&(0x7f0000003780)=""/32, 0x20}, {&(0x7f0000004880)=""/201, 0xc9}, {&(0x7f00000037c0)=""/20, 0x14}], 0x7, &(0x7f0000004a00)=""/68, 0x44}, 0x9}, {{&(0x7f0000004a80)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004b00)=""/170, 0xaa}, {&(0x7f0000003800)=""/56, 0x38}, {&(0x7f0000004bc0)=""/56, 0x38}, {&(0x7f0000004c00)=""/58, 0x3a}], 0x4, &(0x7f0000004c80)=""/152, 0x98}, 0x3f}, {{&(0x7f0000004d40)=@x25={0x9, @remote}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004dc0)=""/171, 0xab}, {&(0x7f0000004e80)=""/43, 0x2b}], 0x2, &(0x7f0000004f00)=""/253, 0xfd}, 0x10001}], 0x9, 0x2, &(0x7f0000005280)={r1, r2+30000000}) [ 1666.541820] [] ? check_preemption_disabled+0x3b/0x200 [ 1666.541829] [] __vmalloc_node_range+0x35e/0x600 07:48:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1666.541838] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1666.541845] [] vmalloc+0x5b/0x70 [ 1666.541853] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1666.541861] [] xt_alloc_entry_offsets+0x41/0x60 [ 1666.541869] [] translate_table+0x215/0x1690 [ 1666.541878] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1666.541887] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1666.541896] [] ? __check_object_size+0x248/0x38e [ 1666.541904] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1666.541913] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1666.541922] [] ? mutex_unlock+0x9/0x10 [ 1666.541931] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1666.541938] [] nf_setsockopt+0x6d/0xc0 [ 1666.541948] [] ipv6_setsockopt+0xc8/0x130 [ 1666.541956] [] tcp_setsockopt+0x88/0xe0 [ 1666.541965] [] sock_common_setsockopt+0x9a/0xe0 [ 1666.541973] [] SyS_setsockopt+0x166/0x260 [ 1666.541980] [] ? SyS_recv+0x40/0x40 [ 1666.541989] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1666.541997] [] ? SyS_clock_settime+0x220/0x220 [ 1666.542005] [] ? do_syscall_64+0x48/0x550 [ 1666.542012] [] ? SyS_recv+0x40/0x40 [ 1666.542019] [] do_syscall_64+0x19f/0x550 07:48:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r1, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r1) tkill(0x0, 0x1000000000016) 07:48:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1666.542028] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1666.542031] Mem-Info: [ 1666.542091] active_anon:70678 inactive_anon:328840 isolated_anon:0 [ 1666.542091] active_file:1885 inactive_file:3656 isolated_file:0 [ 1666.542091] unevictable:0 dirty:171 writeback:0 unstable:0 [ 1666.542091] slab_reclaimable:7011 slab_unreclaimable:66372 [ 1666.542091] mapped:56572 shmem:334599 pagetables:16296 bounce:0 [ 1666.542091] free:1081889 free_pcp:616 free_cma:0 [ 1666.542113] Node 0 active_anon:282712kB inactive_anon:1315360kB active_file:7540kB inactive_file:14624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:226288kB dirty:684kB writeback:0kB shmem:1338396kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no 07:48:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:48:59 executing program 0: rt_sigreturn() r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0x6, 0x4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000)) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000140)=""/187) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x2, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000002300)={'nat\x00', 0x0, 0x4, 0x1000, [], 0x1, &(0x7f0000000200)=[{}], &(0x7f0000001300)=""/4096}, &(0x7f0000000240)=0x78) tkill(r3, 0x3c) write$UHID_INPUT(r2, &(0x7f00000002c0)={0x8, "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", 0x1000}, 0x1006) [ 1666.542140] DMA32 free:3012904kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1996kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1180kB local_pcp:704kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1666.542177] Normal free:1314652kB min:5580kB low:9168kB high:12756kB active_anon:282652kB inactive_anon:1315332kB active_file:7540kB inactive_file:14624kB unevictable:0kB writepending:684kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28044kB slab_unreclaimable:263492kB kernel_stack:22880kB pagetables:64960kB bounce:0kB free_pcp:1284kB local_pcp:636kB free_cma:0kB 07:49:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) write$P9_RMKDIR(r2, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x0, 0x4, 0x8}}, 0x14) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f31793ca8441128817ed0d86537b2f30384e7f2a9eff65f00ff8652ee270a05e615a6879107a5c86d94434bc50bdded9a95f18403b953df3badccd1c99d63e9d4d4d92e1ce8f1e75960b0f708f5fae853fe7e4a3630d87b7901a2d7bf74669e44659d82c695983db83ce63a1fca02e362e"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) lowmem_reserve[]: 0 0 0 [ 1666.542240] DMA32: 110*4kB (UM) 70*8kB (UM) 68*16kB (UM) 90*32kB (UM) 87*64kB (UM) 74*128kB (UM) 77*256kB (UM) 75*512kB (UM) 66*1024kB (UM) 46*2048kB (UM) 677*4096kB (U) = 3012904kB 07:49:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x0) Normal: 12605*4kB (UMEH) 8559*8kB (UMEH) 5500*16kB (UMEH) 4828*32kB (UMEH) 3180*64kB (UME) 1908*128kB (UM) 833*256kB (UME) 317*512kB (UM) 85*1024kB (UM) 15*2048kB (U) 3*4096kB (U) = 1314732kB 340140 total pagecache pages [ 1666.542293] 0 pages in swap cache [ 1666.542297] Swap cache stats: add 0, delete 0, find 0/0 [ 1666.542299] Free swap = 0kB [ 1666.542301] Total swap = 0kB [ 1666.542303] 1965979 pages RAM [ 1666.542306] 0 pages HighMem/MovableOnly [ 1666.542307] 313617 pages reserved 07:49:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) lseek(r5, 0x0, 0x2) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1667.278645] audit_printk_skb: 1992 callbacks suppressed [ 1667.278655] audit: type=1400 audit(1565077691.902:122922): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:49:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1667.280664] audit: type=1400 audit(1565077691.922:122923): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1667.282490] audit: type=1400 audit(1565077691.922:122924): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1667.284313] audit: type=1400 audit(1565077691.922:122925): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1667.285977] audit: type=1400 audit(1565077691.922:122926): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1667.287684] audit: type=1400 audit(1565077691.922:122927): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1667.327005] audit: type=1400 audit(1565077691.952:122928): avc: denied { dac_override } for pid=17255 comm="syz-executor.4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1667.336639] audit: type=1400 audit(1565077691.952:122929): avc: denied { dac_override } for pid=17255 comm="syz-executor.4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1667.342892] audit: type=1400 audit(1565077691.952:122930): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:49:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffdfa, 0x0, 0x16b, 0x0, 0xc8}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ioctl$TIOCSBRK(r0, 0x5427) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) 07:49:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)=@buf={0xf, &(0x7f0000000040)="cb9351756b6315af02be5a2cb26585"}) pwrite64(r1, &(0x7f0000000140)="2597ed5f80c37f7b1225fec3b9d26c70b546ae90c861f13c426196fb385addeb20e6ddd60a3ef383eeb2bdfdb2ded7223da4943b8e956cd723fcb6aa5000b62b61de1c8c243ed178894649bb6b5879601823f83de960b5afd7cbcce02e19129b3d20006b45f7fe4b7cdd5cb861bb917e8628681d76b7580124acd5353044e86aaa8e82ee87e349f09ec09a4f6be79dbbc3659a87ece853c708ac396db3d69d9eee301257ac63ba1d43f1be1285b855d453ce406e33b8be021fffcec8c0184ab3aa60d8a519222efb8441fd1cf07831c219bc0d04724054a9fb1f000bac1bd4e713dccc7100f0daa6b5a8febf161a31d8cf1ae0", 0xf3, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000002c0)=""/153) connect$inet6(r1, &(0x7f0000000080), 0x1c) dup2(r1, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6166676c6500005607f5110000000000000000000000400000000004b38e000000000000000000a300000000001f000000060000ba020000800000000d00000080ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000380)) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x3c) 07:49:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x0) 07:49:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1667.350847] audit: type=1400 audit(1565077691.992:122931): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1672.334716] audit_printk_skb: 1179 callbacks suppressed 07:49:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x200000001, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1672.334731] audit: type=1400 audit(1565077696.972:123325): avc: denied { net_admin } for pid=17264 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 07:49:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x811, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/\x00yz0\x00\xbb\xd3\xc2\x83\x0f*\x10.\xd2\x06\v\xdc\x00\xca\n\xfc\n\n\xb4\x04\x00\x00]\x8e\xa9t\xc2\x81\xf5\xf1\xa6\xd1\x18\xbc8\xd1\xa3\x1dlz\x9a\xc8o\a&\x82\xcf\t\xde\f\xb8\xbe\xf5Z\x1aS\n=,\xee\x9e\xd8%\x16\xa5\x00\xcaq\xb2\xd0Bk\x9e\xcd\x1e%g\xf5_\xc22\x02\x1c\xcc\xb1\xdca\x80V\xac\xf41\x02zU++7\xcfS\x17\xc9\x19G\x89\xfb\xfb\xfe\xc9\x15\x9d\xe6\ar\x99\"\"3Lg\xe8N\xc1', 0x1ff) [ 1672.836429] lowmemorykiller: Killing 'syz-executor.5' (16764) (tgid 16764), adj 1000, [ 1672.836429] to free 38148kB on behalf of 'kswapd0' (33) because [ 1672.836429] cache 22736kB is below limit 65536kB for oom_score_adj 12 [ 1672.836429] Free memory is -7028kB above reserved [ 1672.844020] lowmemorykiller: Killing 'syz-executor.0' (17275) (tgid 17264), adj 1000, [ 1672.844020] to free 35984kB on behalf of 'kswapd0' (33) because [ 1672.844020] cache 22736kB is below limit 65536kB for oom_score_adj 12 [ 1672.844020] Free memory is -13352kB above reserved [ 1672.844627] lowmemorykiller: Killing 'syz-executor.0' (16889) (tgid 16889), adj 1000, [ 1672.844627] to free 36032kB on behalf of 'syz-executor.0' (17275) because [ 1672.844627] cache 22736kB is below limit 65536kB for oom_score_adj 12 [ 1672.844627] Free memory is -13152kB above reserved 07:49:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x0) [ 1673.849829] lowmemorykiller: Killing 'syz-executor.0' (17275) (tgid 17264), adj 1000, [ 1673.849829] to free 35900kB on behalf of 'kswapd0' (33) because [ 1673.849829] cache 5708kB is below limit 6144kB for oom_score_adj 0 [ 1673.849829] Free memory is -13300kB above reserved [ 1674.872119] lowmemorykiller: Killing 'syz-executor.4' (21145) (tgid 21145), adj 1000, [ 1674.872119] to free 35884kB on behalf of 'udevd' (470) because [ 1674.872119] cache 2272kB is below limit 6144kB for oom_score_adj 0 [ 1674.872119] Free memory is -13388kB above reserved 07:49:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 07:49:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="6166676c4300005607f51100000000000000000000db5e23af000005b38e00002dcc6597c23d9e35fbb25734a5ed97ef006e0000000000a300000000001f00000006001dba020000800000000d00001c80ffffffff000000000000004000b0efa864f494f317"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(r3, 0x0, 0x3ffffffd, 0x0) tkill(r3, 0x3c) 07:49:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000004c0)={0x3da, 0x1, 0x0, {0x9}}, 0x1c9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x3, 0x100000001, 0x0, 0xffffffffffff8000, 0x100, 0x80000001, 0x7, 0x4, 0x8, 0x8001, 0x800, 0x56}) write$cgroup_int(r3, &(0x7f0000000700)=0x4453, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x82c8, 0x3, 0xfff}, 0x1, 0x0, 0x7a655761}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000440)={@loopback}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="07000000ffff00000b000c0008000b000900000008000b000e000000ebff0a00c6390000080000000200000008000b0004000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000800}, 0x8091) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r1, &(0x7f00000003c0)='./file2\x00', 0x17f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000005c0)=0xc) syz_open_procfs(r7, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') [ 1674.887899] lowmemorykiller: Killing 'syz-executor.0' (17150) (tgid 17150), adj 1000, [ 1674.887899] to free 35896kB on behalf of 'syz-fuzzer' (2057) because [ 1674.887899] cache 2372kB is below limit 6144kB for oom_score_adj 0 [ 1674.887899] Free memory is -13388kB above reserved ** 11 printk messages dropped ** [ 1680.861935] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1680.861946] CPU: 1 PID: 17340 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1680.861962] ffff8801a4167888 ffffffff81b42e79 1ffff1003482cf13 ffff88019c090000 [ 1680.861973] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801a41679d0 [ 1680.861984] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1680.861986] Call Trace: [ 1680.862003] [] dump_stack+0xc1/0x128 [ 1680.862019] [] warn_alloc.cold.31+0x7f/0x9c [ 1680.862034] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1680.862045] [] ? depot_save_stack+0x11c/0x470 [ 1680.862056] [] ? save_stack_trace+0x16/0x20 [ 1680.862064] [] ? xt_alloc_table_info+0x70/0x100 [ 1680.862075] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1680.862085] [] ? nf_setsockopt+0x6d/0xc0 [ 1680.862094] [] ? check_preemption_disabled+0x3b/0x200 [ 1680.862102] [] __vmalloc_node_range+0x35e/0x600 [ 1680.862111] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1680.862118] [] vmalloc+0x5b/0x70 [ 1680.862125] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1680.862133] [] xt_alloc_entry_offsets+0x41/0x60 [ 1680.862141] [] translate_table+0x215/0x1690 [ 1680.862148] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1680.862157] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1680.862165] [] ? __check_object_size+0x248/0x38e [ 1680.862173] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1680.862182] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1680.862193] [] ? mutex_unlock+0x9/0x10 [ 1680.862202] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1680.862210] [] nf_setsockopt+0x6d/0xc0 [ 1680.862220] [] ipv6_setsockopt+0xc8/0x130 [ 1680.862229] [] tcp_setsockopt+0x88/0xe0 [ 1680.862239] [] sock_common_setsockopt+0x9a/0xe0 [ 1680.862258] [] SyS_setsockopt+0x166/0x260 [ 1680.862273] [] ? SyS_recv+0x40/0x40 [ 1680.862292] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1680.862304] [] ? SyS_clock_settime+0x220/0x220 [ 1680.862319] [] ? do_syscall_64+0x48/0x550 [ 1680.862330] [] ? SyS_recv+0x40/0x40 [ 1680.862342] [] do_syscall_64+0x19f/0x550 [ 1680.862354] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1680.862357] Mem-Info: [ 1680.862380] active_anon:76141 inactive_anon:324713 isolated_anon:0 [ 1680.862380] active_file:986 inactive_file:2962 isolated_file:0 [ 1680.862380] unevictable:0 dirty:88 writeback:0 unstable:0 [ 1680.862380] slab_reclaimable:7019 slab_unreclaimable:66690 [ 1680.862380] mapped:54821 shmem:330506 pagetables:16156 bounce:0 [ 1680.862380] free:1081038 free_pcp:595 free_cma:0 [ 1680.862396] Node 0 active_anon:304564kB inactive_anon:1298852kB active_file:3944kB inactive_file:11848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219284kB dirty:352kB writeback:0kB shmem:1322024kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1680.862417] DMA32 free:3008252kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:32kB active_file:16kB inactive_file:176kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:2168kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1368kB local_pcp:724kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1680.862447] Normal free:1315900kB min:5580kB low:9168kB high:12756kB active_anon:304504kB inactive_anon:1298820kB active_file:3928kB inactive_file:11772kB unevictable:0kB writepending:352kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28076kB slab_unreclaimable:264592kB kernel_stack:22752kB pagetables:64400kB bounce:0kB free_pcp:1012kB local_pcp:540kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1680.862506] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 108*32kB (UM) 111*64kB (UM) 96*128kB (UM) 97*256kB (UM) 96*512kB (UM) 77*1024kB (UM) 58*2048kB (UM) 662*4096kB (UM) = 3008252kB Normal: 12929*4kB (UMEH) 7022*8kB (UMEH) 4459*16kB (UME) 5124*32kB (UMEH) 3347*64kB (UME) 1986*128kB (UM) 862*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1315940kB 334453 total pagecache pages [ 1680.862564] 0 pages in swap cache [ 1680.862569] Swap cache stats: add 0, delete 0, find 0/0 [ 1680.862571] Free swap = 0kB [ 1680.862573] Total swap = 0kB [ 1680.862576] 1965979 pages RAM [ 1680.862578] 0 pages HighMem/MovableOnly [ 1680.862580] 313617 pages reserved [ 1682.096015] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1682.096024] CPU: 0 PID: 17364 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1682.096039] ffff8801a7a4f888 ffffffff81b42e79 1ffff10034f49f13 ffff8801cfdf2f80 [ 1682.096049] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801a7a4f9d0 [ 1682.096059] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1682.096060] Call Trace: [ 1682.096076] [] dump_stack+0xc1/0x128 [ 1682.096085] [] warn_alloc.cold.31+0x7f/0x9c [ 1682.096095] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1682.096103] [] ? depot_save_stack+0x11c/0x470 [ 1682.096113] [] ? save_stack_trace+0x16/0x20 [ 1682.096121] [] ? xt_alloc_table_info+0x70/0x100 [ 1682.096130] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1682.096137] [] ? nf_setsockopt+0x6d/0xc0 [ 1682.096146] [] ? check_preemption_disabled+0x3b/0x200 [ 1682.096154] [] __vmalloc_node_range+0x35e/0x600 [ 1682.096162] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1682.096169] [] vmalloc+0x5b/0x70 [ 1682.096176] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1682.096183] [] xt_alloc_entry_offsets+0x41/0x60 [ 1682.096190] [] translate_table+0x215/0x1690 [ 1682.096197] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1682.096205] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1682.096213] [] ? __check_object_size+0x248/0x38e [ 1682.096220] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1682.096228] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1682.096238] [] ? mutex_unlock+0x9/0x10 [ 1682.096245] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1682.096252] [] nf_setsockopt+0x6d/0xc0 [ 1682.096262] [] ipv6_setsockopt+0xc8/0x130 [ 1682.096269] [] tcp_setsockopt+0x88/0xe0 [ 1682.096277] [] sock_common_setsockopt+0x9a/0xe0 [ 1682.096284] [] SyS_setsockopt+0x166/0x260 [ 1682.096290] [] ? SyS_recv+0x40/0x40 [ 1682.096298] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1682.096306] [] ? SyS_clock_settime+0x220/0x220 [ 1682.096312] [] ? do_syscall_64+0x48/0x550 [ 1682.096326] [] ? SyS_recv+0x40/0x40 [ 1682.096333] [] do_syscall_64+0x19f/0x550 [ 1682.096340] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1682.096344] Mem-Info: [ 1682.096362] active_anon:69315 inactive_anon:324709 isolated_anon:0 [ 1682.096362] active_file:1164 inactive_file:3156 isolated_file:0 [ 1682.096362] unevictable:0 dirty:137 writeback:0 unstable:0 [ 1682.096362] slab_reclaimable:7017 slab_unreclaimable:66596 [ 1682.096362] mapped:55067 shmem:330506 pagetables:16223 bounce:0 [ 1682.096362] free:1087516 free_pcp:505 free_cma:0 [ 1682.096375] Node 0 active_anon:277260kB inactive_anon:1298836kB active_file:4656kB inactive_file:12624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220268kB dirty:548kB writeback:0kB shmem:1322024kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1682.096394] DMA32 free:3008252kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:32kB active_file:136kB inactive_file:56kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:2168kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1368kB local_pcp:644kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1682.096417] Normal free:1341812kB min:5580kB low:9168kB high:12756kB active_anon:277200kB inactive_anon:1298804kB active_file:4520kB inactive_file:12568kB unevictable:0kB writepending:548kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28068kB slab_unreclaimable:264216kB kernel_stack:22976kB pagetables:64668kB bounce:0kB free_pcp:652kB local_pcp:584kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1682.096469] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 108*32kB (UM) 111*64kB (UM) 96*128kB (UM) 97*256kB (UM) 96*512kB (UM) 77*1024kB (UM) 58*2048kB (UM) 662*4096kB (UM) = 3008252kB Normal: 12841*4kB (UEH) 8306*8kB (UMEH) 5452*16kB (UME) 5112*32kB (UMEH) 3351*64kB (UME) 1987*128kB (UM) 862*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1341748kB 334826 total pagecache pages [ 1682.096519] 0 pages in swap cache [ 1682.096522] Swap cache stats: add 0, delete 0, find 0/0 [ 1682.096524] Free swap = 0kB [ 1682.096526] Total swap = 0kB [ 1682.096528] 1965979 pages RAM [ 1682.096530] 0 pages HighMem/MovableOnly [ 1682.096532] 313617 pages reserved [ 1683.422748] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1683.422759] CPU: 1 PID: 17397 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1683.422776] ffff8801a413f888 ffffffff81b42e79 1ffff10034827f13 ffff8801d5e017c0 [ 1683.422788] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801a413f9d0 [ 1683.422801] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1683.422804] Call Trace: [ 1683.422819] [] dump_stack+0xc1/0x128 [ 1683.422829] [] warn_alloc.cold.31+0x7f/0x9c [ 1683.422839] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1683.422847] [] ? depot_save_stack+0x11c/0x470 [ 1683.422857] [] ? save_stack_trace+0x16/0x20 [ 1683.422866] [] ? xt_alloc_table_info+0x70/0x100 [ 1683.422875] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1683.422883] [] ? nf_setsockopt+0x6d/0xc0 [ 1683.422892] [] ? check_preemption_disabled+0x3b/0x200 [ 1683.422900] [] __vmalloc_node_range+0x35e/0x600 [ 1683.422909] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1683.422915] [] vmalloc+0x5b/0x70 [ 1683.422923] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1683.422930] [] xt_alloc_entry_offsets+0x41/0x60 [ 1683.422938] [] translate_table+0x215/0x1690 [ 1683.422946] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1683.422955] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1683.422963] [] ? __check_object_size+0x248/0x38e [ 1683.422971] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1683.422979] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1683.422989] [] ? mutex_unlock+0x9/0x10 [ 1683.422997] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1683.423004] [] nf_setsockopt+0x6d/0xc0 [ 1683.423014] [] ipv6_setsockopt+0xc8/0x130 [ 1683.423022] [] tcp_setsockopt+0x88/0xe0 [ 1683.423030] [] sock_common_setsockopt+0x9a/0xe0 [ 1683.423038] [] SyS_setsockopt+0x166/0x260 [ 1683.423045] [] ? SyS_recv+0x40/0x40 [ 1683.423053] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1683.423062] [] ? SyS_clock_settime+0x220/0x220 [ 1683.423069] [] ? do_syscall_64+0x48/0x550 [ 1683.423076] [] ? SyS_recv+0x40/0x40 [ 1683.423083] [] do_syscall_64+0x19f/0x550 [ 1683.423091] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1683.423095] Mem-Info: [ 1683.423114] active_anon:69262 inactive_anon:324709 isolated_anon:0 [ 1683.423114] active_file:1306 inactive_file:3050 isolated_file:0 [ 1683.423114] unevictable:0 dirty:139 writeback:8 unstable:0 [ 1683.423114] slab_reclaimable:7018 slab_unreclaimable:66615 [ 1683.423114] mapped:55053 shmem:330506 pagetables:16270 bounce:0 [ 1683.423114] free:1087500 free_pcp:499 free_cma:0 [ 1683.423128] Node 0 active_anon:277048kB inactive_anon:1298836kB active_file:5224kB inactive_file:12200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220212kB dirty:556kB writeback:32kB shmem:1322024kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1683.423152] DMA32 free:3008252kB min:4696kB low:7712kB high:10728kB active_anon:64kB inactive_anon:28kB active_file:176kB inactive_file:16kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:2168kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1372kB local_pcp:728kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1683.423183] Normal free:1341748kB min:5580kB low:9168kB high:12756kB active_anon:276984kB inactive_anon:1298808kB active_file:5048kB inactive_file:12184kB unevictable:0kB writepending:588kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28072kB slab_unreclaimable:264292kB kernel_stack:22944kB pagetables:64856kB bounce:0kB free_pcp:624kB local_pcp:252kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1683.423237] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 108*32kB (UM) 111*64kB (UM) 96*128kB (UM) 97*256kB (UM) 96*512kB (UM) 77*1024kB (UM) 58*2048kB (UM) 662*4096kB (UM) = 3008252kB Normal: 12841*4kB (UMEH) 8360*8kB (UMEH) 5401*16kB (UME) 5120*32kB (UMEH) 3353*64kB (UME) 1987*128kB (UM) 862*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1341748kB 334849 total pagecache pages [ 1683.423290] 0 pages in swap cache [ 1683.423294] Swap cache stats: add 0, delete 0, find 0/0 [ 1683.423296] Free swap = 0kB [ 1683.423298] Total swap = 0kB [ 1683.423300] 1965979 pages RAM [ 1683.423303] 0 pages HighMem/MovableOnly [ 1683.423305] 313617 pages reserved [ 1683.432847] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1683.432858] CPU: 1 PID: 17399 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1683.432876] ffff88019b127888 ffffffff81b42e79 1ffff10033624f13 ffff8801c782c740 [ 1683.432890] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019b1279d0 [ 1683.432904] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1683.432907] Call Trace: [ 1683.432924] [] dump_stack+0xc1/0x128 [ 1683.432935] [] warn_alloc.cold.31+0x7f/0x9c [ 1683.432945] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1683.432954] [] ? depot_save_stack+0x11c/0x470 [ 1683.432966] [] ? save_stack_trace+0x16/0x20 [ 1683.432976] [] ? xt_alloc_table_info+0x70/0x100 [ 1683.432986] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1683.432995] [] ? nf_setsockopt+0x6d/0xc0 [ 1683.433004] [] ? check_preemption_disabled+0x3b/0x200 [ 1683.433012] [] __vmalloc_node_range+0x35e/0x600 [ 1683.433021] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1683.433028] [] vmalloc+0x5b/0x70 [ 1683.433036] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1683.433044] [] xt_alloc_entry_offsets+0x41/0x60 [ 1683.433053] [] translate_table+0x215/0x1690 [ 1683.433061] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1683.433070] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1683.433078] [] ? __check_object_size+0x248/0x38e [ 1683.433087] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1683.433094] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1683.433104] [] ? mutex_unlock+0x9/0x10 [ 1683.433112] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1683.433120] [] nf_setsockopt+0x6d/0xc0 [ 1683.433128] [] ipv6_setsockopt+0xc8/0x130 [ 1683.433135] [] tcp_setsockopt+0x88/0xe0 [ 1683.433144] [] sock_common_setsockopt+0x9a/0xe0 [ 1683.433151] [] SyS_setsockopt+0x166/0x260 [ 1683.433158] [] ? SyS_recv+0x40/0x40 [ 1683.433167] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1683.433175] [] ? SyS_clock_settime+0x220/0x220 [ 1683.433183] [] ? do_syscall_64+0x48/0x550 [ 1683.433191] [] ? SyS_recv+0x40/0x40 [ 1683.433198] [] do_syscall_64+0x19f/0x550 [ 1683.433207] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1683.433210] Mem-Info: [ 1683.433233] active_anon:69312 inactive_anon:324709 isolated_anon:0 [ 1683.433233] active_file:1306 inactive_file:3050 isolated_file:0 [ 1683.433233] unevictable:0 dirty:139 writeback:8 unstable:0 [ 1683.433233] slab_reclaimable:7018 slab_unreclaimable:66615 [ 1683.433233] mapped:55053 shmem:330506 pagetables:16270 bounce:0 [ 1683.433233] free:1087438 free_pcp:519 free_cma:0 [ 1683.433253] Node 0 active_anon:277248kB inactive_anon:1298836kB active_file:5224kB inactive_file:12200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220212kB dirty:556kB writeback:32kB shmem:1322024kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1683.433280] DMA32 free:3008252kB min:4696kB low:7712kB high:10728kB active_anon:64kB inactive_anon:28kB active_file:176kB inactive_file:16kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:2168kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1372kB local_pcp:728kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1683.433315] Normal free:1341500kB min:5580kB low:9168kB high:12756kB active_anon:277184kB inactive_anon:1298808kB active_file:5048kB inactive_file:12184kB unevictable:0kB writepending:588kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28072kB slab_unreclaimable:264292kB kernel_stack:22976kB pagetables:64856kB bounce:0kB free_pcp:704kB local_pcp:344kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1683.433374] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 108*32kB (UM) 111*64kB (UM) 96*128kB (UM) 97*256kB (UM) 96*512kB (UM) 77*1024kB (UM) 58*2048kB (UM) 662*4096kB (UM) = 3008252kB Normal: 12841*4kB (UMEH) 8329*8kB (UMEH) 5401*16kB (UME) 5119*32kB (UMEH) 3353*64kB (UME) 1987*128kB (UM) 862*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1341468kB 334849 total pagecache pages [ 1683.433432] 0 pages in swap cache [ 1683.433436] Swap cache stats: add 0, delete 0, find 0/0 [ 1683.433438] Free swap = 0kB [ 1683.433441] Total swap = 0kB [ 1683.433443] 1965979 pages RAM [ 1683.433445] 0 pages HighMem/MovableOnly [ 1683.433447] 313617 pages reserved [ 1684.199643] audit_printk_skb: 1560 callbacks suppressed [ 1684.199658] audit: type=1400 audit(1565077708.842:123857): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1684.203080] audit: type=1400 audit(1565077708.842:123858): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1684.209884] audit: type=1400 audit(1565077708.852:123859): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1684.216346] audit: type=1400 audit(1565077708.852:123860): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1684.221228] audit: type=1400 audit(1565077708.862:123861): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1684.221384] audit: type=1400 audit(1565077708.862:123862): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1684.226054] audit: type=1400 audit(1565077708.862:123863): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1684.237439] audit: type=1400 audit(1565077708.872:123864): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1684.239552] audit: type=1400 audit(1565077708.882:123865): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1684.261567] audit: type=1400 audit(1565077708.892:123866): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1686.364922] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1686.364933] CPU: 1 PID: 17459 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1686.364953] ffff8801a5387888 ffffffff81b42e79 1ffff10034a70f13 ffff8801c30e17c0 [ 1686.364968] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801a53879d0 [ 1686.364981] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1686.364986] Call Trace: [ 1686.365007] [] dump_stack+0xc1/0x128 [ 1686.365019] [] warn_alloc.cold.31+0x7f/0x9c [ 1686.365028] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1686.365037] [] ? depot_save_stack+0x11c/0x470 [ 1686.365049] [] ? save_stack_trace+0x16/0x20 [ 1686.365060] [] ? xt_alloc_table_info+0x70/0x100 [ 1686.365070] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1686.365079] [] ? nf_setsockopt+0x6d/0xc0 [ 1686.365088] [] ? check_preemption_disabled+0x3b/0x200 [ 1686.365096] [] __vmalloc_node_range+0x35e/0x600 [ 1686.365105] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1686.365113] [] vmalloc+0x5b/0x70 [ 1686.365121] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1686.365128] [] xt_alloc_entry_offsets+0x41/0x60 [ 1686.365137] [] translate_table+0x215/0x1690 [ 1686.365145] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1686.365155] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1686.365163] [] ? __check_object_size+0x248/0x38e [ 1686.365172] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1686.365181] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1686.365191] [] ? mutex_unlock+0x9/0x10 [ 1686.365199] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1686.365207] [] nf_setsockopt+0x6d/0xc0 [ 1686.365217] [] ipv6_setsockopt+0xc8/0x130 [ 1686.365225] [] tcp_setsockopt+0x88/0xe0 [ 1686.365234] [] sock_common_setsockopt+0x9a/0xe0 [ 1686.365242] [] SyS_setsockopt+0x166/0x260 [ 1686.365250] [] ? SyS_recv+0x40/0x40 [ 1686.365258] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1686.365267] [] ? SyS_clock_settime+0x220/0x220 [ 1686.365274] [] ? do_syscall_64+0x48/0x550 [ 1686.365281] [] ? SyS_recv+0x40/0x40 [ 1686.365289] [] do_syscall_64+0x19f/0x550 [ 1686.365296] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1686.365299] Mem-Info: [ 1686.365326] active_anon:73012 inactive_anon:324710 isolated_anon:0 [ 1686.365326] active_file:1373 inactive_file:3123 isolated_file:0 [ 1686.365326] unevictable:0 dirty:206 writeback:0 unstable:0 [ 1686.365326] slab_reclaimable:7013 slab_unreclaimable:66756 [ 1686.365326] mapped:55124 shmem:330506 pagetables:16242 bounce:0 [ 1686.365326] free:1083454 free_pcp:567 free_cma:0 [ 1686.365341] Node 0 active_anon:292048kB inactive_anon:1298840kB active_file:5492kB inactive_file:12492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220496kB dirty:824kB writeback:0kB shmem:1322024kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1686.365359] DMA32 free:3008252kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:188kB inactive_file:4kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:2168kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1372kB local_pcp:728kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1686.365387] Normal free:1325564kB min:5580kB low:9168kB high:12756kB active_anon:291988kB inactive_anon:1298812kB active_file:5304kB inactive_file:12488kB unevictable:0kB writepending:824kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28052kB slab_unreclaimable:264856kB kernel_stack:22944kB pagetables:64744kB bounce:0kB free_pcp:896kB local_pcp:384kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1686.365440] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 108*32kB (UM) 111*64kB (UM) 96*128kB (UM) 97*256kB (UM) 96*512kB (UM) 77*1024kB (UM) 58*2048kB (UM) 662*4096kB (UM) = 3008252kB Normal: 12667*4kB (UMEH) 6952*8kB (UEH) 5170*16kB (UME) 5083*32kB (UMEH) 3362*64kB (UME) 1987*128kB (UM) 862*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1325484kB 335025 total pagecache pages [ 1686.365497] 0 pages in swap cache [ 1686.365502] Swap cache stats: add 0, delete 0, find 0/0 [ 1686.365505] Free swap = 0kB [ 1686.365508] Total swap = 0kB [ 1686.365510] 1965979 pages RAM [ 1686.365513] 0 pages HighMem/MovableOnly [ 1686.365515] 313617 pages reserved [ 1689.222298] audit_printk_skb: 1323 callbacks suppressed [ 1689.222307] audit: type=1400 audit(1565077713.862:124308): avc: denied { sys_admin } for pid=2104 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1689.295032] audit: type=1400 audit(1565077713.932:124309): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1689.313683] audit: type=1400 audit(1565077713.952:124310): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1689.324605] audit: type=1400 audit(1565077713.962:124311): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1689.332382] audit: type=1400 audit(1565077713.972:124312): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1689.362223] audit: type=1400 audit(1565077714.002:124313): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1689.376116] audit: type=1400 audit(1565077714.012:124314): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1689.386992] audit: type=1400 audit(1565077714.022:124315): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1689.410861] audit: type=1400 audit(1565077714.052:124316): avc: denied { net_admin } for pid=2104 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1689.462717] audit: type=1400 audit(1565077714.102:124318): avc: denied { sys_admin } for pid=2099 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1690.322427] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1690.322438] CPU: 1 PID: 17519 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1690.322456] ffff880196a37888 ffffffff81b42e79 1ffff10032d46f13 ffff8801cee84740 [ 1690.322470] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff880196a379d0 [ 1690.322484] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1690.322486] Call Trace: [ 1690.322505] [] dump_stack+0xc1/0x128 [ 1690.322517] [] warn_alloc.cold.31+0x7f/0x9c [ 1690.322527] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1690.322535] [] ? depot_save_stack+0x11c/0x470 [ 1690.322549] [] ? save_stack_trace+0x16/0x20 [ 1690.322561] [] ? xt_alloc_table_info+0x70/0x100 [ 1690.322572] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1690.322580] [] ? nf_setsockopt+0x6d/0xc0 [ 1690.322589] [] ? check_preemption_disabled+0x3b/0x200 [ 1690.322597] [] __vmalloc_node_range+0x35e/0x600 [ 1690.322606] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1690.322613] [] vmalloc+0x5b/0x70 [ 1690.322621] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1690.322629] [] xt_alloc_entry_offsets+0x41/0x60 [ 1690.322637] [] translate_table+0x215/0x1690 [ 1690.322645] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1690.322654] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1690.322663] [] ? __check_object_size+0x248/0x38e [ 1690.322671] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1690.322680] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1690.322690] [] ? mutex_unlock+0x9/0x10 [ 1690.322698] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1690.322706] [] nf_setsockopt+0x6d/0xc0 [ 1690.322715] [] ipv6_setsockopt+0xc8/0x130 [ 1690.322723] [] tcp_setsockopt+0x88/0xe0 [ 1690.322731] [] sock_common_setsockopt+0x9a/0xe0 [ 1690.322739] [] SyS_setsockopt+0x166/0x260 [ 1690.322746] [] ? SyS_recv+0x40/0x40 [ 1690.322755] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1690.322764] [] ? SyS_clock_settime+0x220/0x220 [ 1690.322772] [] ? do_syscall_64+0x48/0x550 [ 1690.322779] [] ? SyS_recv+0x40/0x40 [ 1690.322787] [] do_syscall_64+0x19f/0x550 [ 1690.322796] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1690.322799] Mem-Info: [ 1690.322820] active_anon:69145 inactive_anon:324722 isolated_anon:0 [ 1690.322820] active_file:1427 inactive_file:3150 isolated_file:0 [ 1690.322820] unevictable:0 dirty:200 writeback:0 unstable:0 [ 1690.322820] slab_reclaimable:7034 slab_unreclaimable:66940 [ 1690.322820] mapped:55223 shmem:330526 pagetables:16256 bounce:0 [ 1690.322820] free:1087116 free_pcp:494 free_cma:0 [ 1690.322835] Node 0 active_anon:276580kB inactive_anon:1298888kB active_file:5708kB inactive_file:12600kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220892kB dirty:800kB writeback:0kB shmem:1322104kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1690.322857] DMA32 free:3008252kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:2164kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1380kB local_pcp:732kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1690.322886] Normal free:1340212kB min:5580kB low:9168kB high:12756kB active_anon:276520kB inactive_anon:1298860kB active_file:5516kB inactive_file:12600kB unevictable:0kB writepending:800kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28136kB slab_unreclaimable:265596kB kernel_stack:22848kB pagetables:64800kB bounce:0kB free_pcp:596kB local_pcp:276kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1690.322945] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 108*32kB (UM) 111*64kB (UM) 96*128kB (UM) 97*256kB (UM) 96*512kB (UM) 77*1024kB (UM) 58*2048kB (UM) 662*4096kB (UM) = 3008252kB Normal: 12943*4kB (UMEH) 8434*8kB (UMEH) 5163*16kB (UME) 5126*32kB (UMEH) 3366*64kB (UME) 1989*128kB (UM) 862*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1340220kB 335103 total pagecache pages [ 1690.323002] 0 pages in swap cache [ 1690.323007] Swap cache stats: add 0, delete 0, find 0/0 [ 1690.323009] Free swap = 0kB [ 1690.323011] Total swap = 0kB [ 1690.323014] 1965979 pages RAM [ 1690.323016] 0 pages HighMem/MovableOnly [ 1690.323018] 313617 pages reserved [ 1694.240538] audit_printk_skb: 1686 callbacks suppressed [ 1694.240547] audit: type=1400 audit(1565077718.882:124880): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1694.244059] audit: type=1400 audit(1565077718.882:124881): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1694.266985] audit: type=1400 audit(1565077718.902:124882): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1694.281713] audit: type=1400 audit(1565077718.922:124883): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1694.296894] audit: type=1400 audit(1565077718.932:124884): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1694.316354] audit: type=1400 audit(1565077718.952:124885): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1694.336444] audit: type=1400 audit(1565077718.972:124886): avc: denied { dac_override } for pid=17622 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1694.337077] audit: type=1400 audit(1565077718.972:124887): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1694.339360] audit: type=1400 audit(1565077718.982:124888): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1694.357760] audit: type=1400 audit(1565077718.992:124889): avc: denied { net_admin } for pid=2103 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1694.587455] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1694.587465] CPU: 0 PID: 17612 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1694.587484] ffff8801d1eaf888 ffffffff81b42e79 1ffff1003a3d5f13 ffff8801cfc397c0 [ 1694.587498] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801d1eaf9d0 [ 1694.587511] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1694.587515] Call Trace: [ 1694.587533] [] dump_stack+0xc1/0x128 [ 1694.587545] [] warn_alloc.cold.31+0x7f/0x9c [ 1694.587555] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1694.587564] [] ? depot_save_stack+0x11c/0x470 [ 1694.587574] [] ? save_stack_trace+0x16/0x20 [ 1694.587583] [] ? xt_alloc_table_info+0x70/0x100 [ 1694.587592] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1694.587600] [] ? nf_setsockopt+0x6d/0xc0 [ 1694.587609] [] ? check_preemption_disabled+0x3b/0x200 [ 1694.587618] [] __vmalloc_node_range+0x35e/0x600 [ 1694.587627] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1694.587635] [] vmalloc+0x5b/0x70 [ 1694.587642] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1694.587650] [] xt_alloc_entry_offsets+0x41/0x60 [ 1694.587659] [] translate_table+0x215/0x1690 [ 1694.587667] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1694.587677] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1694.587685] [] ? __check_object_size+0x248/0x38e [ 1694.587694] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1694.587703] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1694.587713] [] ? mutex_unlock+0x9/0x10 [ 1694.587721] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1694.587729] [] nf_setsockopt+0x6d/0xc0 [ 1694.587738] [] ipv6_setsockopt+0xc8/0x130 [ 1694.587747] [] tcp_setsockopt+0x88/0xe0 [ 1694.587756] [] sock_common_setsockopt+0x9a/0xe0 [ 1694.587764] [] SyS_setsockopt+0x166/0x260 [ 1694.587771] [] ? SyS_recv+0x40/0x40 [ 1694.587780] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1694.587789] [] ? SyS_clock_settime+0x220/0x220 [ 1694.587796] [] ? do_syscall_64+0x48/0x550 [ 1694.587804] [] ? SyS_recv+0x40/0x40 [ 1694.587811] [] do_syscall_64+0x19f/0x550 [ 1694.587820] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1694.587823] Mem-Info: [ 1694.587848] active_anon:73304 inactive_anon:324689 isolated_anon:0 [ 1694.587848] active_file:1429 inactive_file:4818 isolated_file:0 [ 1694.587848] unevictable:0 dirty:203 writeback:0 unstable:0 [ 1694.587848] slab_reclaimable:7035 slab_unreclaimable:66873 [ 1694.587848] mapped:57059 shmem:330506 pagetables:16297 bounce:0 [ 1694.587848] free:1081046 free_pcp:603 free_cma:0 [ 1694.587867] Node 0 active_anon:293216kB inactive_anon:1298756kB active_file:5716kB inactive_file:19272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228236kB dirty:812kB writeback:0kB shmem:1322024kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1694.587888] DMA32 free:3008252kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:2152kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1388kB local_pcp:652kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1694.587917] Normal free:1315932kB min:5580kB low:9168kB high:12756kB active_anon:293156kB inactive_anon:1298728kB active_file:5524kB inactive_file:19272kB unevictable:0kB writepending:812kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28140kB slab_unreclaimable:265340kB kernel_stack:23232kB pagetables:64964kB bounce:0kB free_pcp:1024kB local_pcp:536kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1694.587983] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 108*32kB (UM) 111*64kB (UM) 96*128kB (UM) 97*256kB (UM) 96*512kB (UM) 77*1024kB (UM) 58*2048kB (UM) 662*4096kB (UM) = 3008252kB Normal: 12373*4kB (UEH) 6912*8kB (UEH) 4529*16kB (UMEH) 5124*32kB (UMEH) 3372*64kB (UME) 1989*128kB (UM) 862*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1315940kB 336752 total pagecache pages [ 1694.588040] 0 pages in swap cache [ 1694.588045] Swap cache stats: add 0, delete 0, find 0/0 [ 1694.588047] Free swap = 0kB [ 1694.588049] Total swap = 0kB [ 1694.588051] 1965979 pages RAM [ 1694.588053] 0 pages HighMem/MovableOnly [ 1694.588055] 313617 pages reserved [ 1694.628670] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1694.628678] CPU: 0 PID: 17614 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1694.628692] ffff8801c2bcf888 ffffffff81b42e79 1ffff10038579f13 ffff8801d65f2f80 [ 1694.628701] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801c2bcf9d0 [ 1694.628710] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1694.628712] Call Trace: [ 1694.628727] [] dump_stack+0xc1/0x128 [ 1694.628736] [] warn_alloc.cold.31+0x7f/0x9c [ 1694.628745] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1694.628754] [] ? depot_save_stack+0x11c/0x470 [ 1694.628763] [] ? save_stack_trace+0x16/0x20 [ 1694.628771] [] ? xt_alloc_table_info+0x70/0x100 [ 1694.628779] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1694.628786] [] ? nf_setsockopt+0x6d/0xc0 [ 1694.628795] [] ? check_preemption_disabled+0x3b/0x200 [ 1694.628802] [] __vmalloc_node_range+0x35e/0x600 [ 1694.628810] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1694.628816] [] vmalloc+0x5b/0x70 [ 1694.628823] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1694.628829] [] xt_alloc_entry_offsets+0x41/0x60 [ 1694.628837] [] translate_table+0x215/0x1690 [ 1694.628844] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1694.628852] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1694.628858] [] ? __check_object_size+0x248/0x38e [ 1694.628865] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1694.628873] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1694.628882] [] ? mutex_unlock+0x9/0x10 [ 1694.628889] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1694.628894] [] nf_setsockopt+0x6d/0xc0 [ 1694.628903] [] ipv6_setsockopt+0xc8/0x130 [ 1694.628910] [] tcp_setsockopt+0x88/0xe0 [ 1694.628918] [] sock_common_setsockopt+0x9a/0xe0 [ 1694.628924] [] SyS_setsockopt+0x166/0x260 [ 1694.628930] [] ? SyS_recv+0x40/0x40 [ 1694.628938] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1694.628945] [] ? SyS_clock_settime+0x220/0x220 [ 1694.628952] [] ? task_stopped_code+0x140/0x140 [ 1694.628958] [] ? do_syscall_64+0x48/0x550 [ 1694.628964] [] ? SyS_recv+0x40/0x40 [ 1694.628970] [] do_syscall_64+0x19f/0x550 [ 1694.628977] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1694.628980] Mem-Info: [ 1694.628996] active_anon:73304 inactive_anon:324689 isolated_anon:0 [ 1694.628996] active_file:1429 inactive_file:4818 isolated_file:0 [ 1694.628996] unevictable:0 dirty:203 writeback:0 unstable:0 [ 1694.628996] slab_reclaimable:7035 slab_unreclaimable:66899 [ 1694.628996] mapped:57059 shmem:330506 pagetables:16297 bounce:0 [ 1694.628996] free:1081046 free_pcp:583 free_cma:0 [ 1694.629009] Node 0 active_anon:293216kB inactive_anon:1298756kB active_file:5716kB inactive_file:19272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228236kB dirty:812kB writeback:0kB shmem:1322024kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1694.629025] DMA32 free:3008252kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:2152kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1388kB local_pcp:652kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1694.629049] Normal free:1315932kB min:5580kB low:9168kB high:12756kB active_anon:293156kB inactive_anon:1298728kB active_file:5524kB inactive_file:19272kB unevictable:0kB writepending:812kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28140kB slab_unreclaimable:265444kB kernel_stack:23296kB pagetables:64964kB bounce:0kB free_pcp:944kB local_pcp:472kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1694.629098] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 108*32kB (UM) 111*64kB (UM) 96*128kB (UM) 97*256kB (UM) 96*512kB (UM) 77*1024kB (UM) 58*2048kB (UM) 662*4096kB (UM) = 3008252kB Normal: 12373*4kB (UEH) 6910*8kB (UEH) 4526*16kB (UMEH) 5121*32kB (UMEH) 3372*64kB (UME) 1989*128kB (UM) 862*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1315780kB 336752 total pagecache pages [ 1694.629146] 0 pages in swap cache [ 1694.629150] Swap cache stats: add 0, delete 0, find 0/0 [ 1694.629152] Free swap = 0kB [ 1694.629154] Total swap = 0kB [ 1694.629156] 1965979 pages RAM [ 1694.629158] 0 pages HighMem/MovableOnly [ 1694.629160] 313617 pages reserved [ 1695.974627] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1695.974638] CPU: 1 PID: 17645 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1695.974657] ffff8801a486f888 ffffffff81b42e79 1ffff1003490df13 ffff8801d74197c0 [ 1695.974668] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801a486f9d0 [ 1695.974681] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1695.974683] Call Trace: [ 1695.974699] [] dump_stack+0xc1/0x128 [ 1695.974711] [] warn_alloc.cold.31+0x7f/0x9c [ 1695.974734] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1695.974745] [] ? depot_save_stack+0x11c/0x470 [ 1695.974756] [] ? save_stack_trace+0x16/0x20 [ 1695.974764] [] ? xt_alloc_table_info+0x70/0x100 [ 1695.974772] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1695.974780] [] ? nf_setsockopt+0x6d/0xc0 [ 1695.974788] [] ? check_preemption_disabled+0x3b/0x200 [ 1695.974795] [] __vmalloc_node_range+0x35e/0x600 [ 1695.974804] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1695.974810] [] vmalloc+0x5b/0x70 [ 1695.974817] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1695.974825] [] xt_alloc_entry_offsets+0x41/0x60 [ 1695.974832] [] translate_table+0x215/0x1690 [ 1695.974839] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1695.974848] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1695.974856] [] ? __check_object_size+0x248/0x38e [ 1695.974864] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1695.974873] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1695.974882] [] ? mutex_unlock+0x9/0x10 [ 1695.974890] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1695.974896] [] nf_setsockopt+0x6d/0xc0 [ 1695.974906] [] ipv6_setsockopt+0xc8/0x130 [ 1695.974913] [] tcp_setsockopt+0x88/0xe0 [ 1695.974923] [] sock_common_setsockopt+0x9a/0xe0 [ 1695.974929] [] SyS_setsockopt+0x166/0x260 [ 1695.974936] [] ? SyS_recv+0x40/0x40 [ 1695.974944] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1695.974952] [] ? SyS_clock_settime+0x220/0x220 [ 1695.974959] [] ? do_syscall_64+0x48/0x550 [ 1695.974966] [] ? SyS_recv+0x40/0x40 [ 1695.974974] [] do_syscall_64+0x19f/0x550 [ 1695.974984] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1695.974989] Mem-Info: [ 1695.975010] active_anon:76723 inactive_anon:326212 isolated_anon:0 [ 1695.975010] active_file:1430 inactive_file:4830 isolated_file:0 [ 1695.975010] unevictable:0 dirty:203 writeback:0 unstable:0 [ 1695.975010] slab_reclaimable:7037 slab_unreclaimable:66812 [ 1695.975010] mapped:58564 shmem:332030 pagetables:16316 bounce:0 [ 1695.975010] free:1076109 free_pcp:529 free_cma:0 [ 1695.975025] Node 0 active_anon:306892kB inactive_anon:1304848kB active_file:5720kB inactive_file:19320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:234256kB dirty:812kB writeback:0kB shmem:1328120kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1695.975052] DMA32 free:3008380kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:2024kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1388kB local_pcp:736kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1695.975084] Normal free:1296056kB min:5580kB low:9168kB high:12756kB active_anon:306832kB inactive_anon:1304820kB active_file:5528kB inactive_file:19320kB unevictable:0kB writepending:812kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28148kB slab_unreclaimable:265224kB kernel_stack:23360kB pagetables:65040kB bounce:0kB free_pcp:708kB local_pcp:388kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1695.975142] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 107*32kB (UM) 110*64kB (UM) 94*128kB (UM) 97*256kB (UM) 95*512kB (UM) 76*1024kB (UM) 59*2048kB (UM) 662*4096kB (UM) = 3008412kB Normal: 12320*4kB (UMEH) 6899*8kB (UEH) 4212*16kB (UEH) 4657*32kB (UMEH) 3378*64kB (UME) 1990*128kB (UM) 862*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1296120kB 338326 total pagecache pages [ 1695.975200] 0 pages in swap cache [ 1695.975204] Swap cache stats: add 0, delete 0, find 0/0 [ 1695.975206] Free swap = 0kB [ 1695.975209] Total swap = 0kB [ 1695.975211] 1965979 pages RAM [ 1695.975213] 0 pages HighMem/MovableOnly [ 1695.975215] 313617 pages reserved [ 1696.484157] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1696.484167] CPU: 0 PID: 17668 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1696.484192] ffff88019d7b7888 ffffffff81b42e79 1ffff10033af6f13 ffff8801d12297c0 [ 1696.484205] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019d7b79d0 [ 1696.484219] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1696.484222] Call Trace: [ 1696.484239] [] dump_stack+0xc1/0x128 [ 1696.484251] [] warn_alloc.cold.31+0x7f/0x9c [ 1696.484261] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1696.484270] [] ? depot_save_stack+0x11c/0x470 [ 1696.484283] [] ? save_stack_trace+0x16/0x20 [ 1696.484296] [] ? xt_alloc_table_info+0x70/0x100 [ 1696.484306] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1696.484314] [] ? nf_setsockopt+0x6d/0xc0 [ 1696.484323] [] ? check_preemption_disabled+0x3b/0x200 [ 1696.484331] [] __vmalloc_node_range+0x35e/0x600 [ 1696.484340] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1696.484346] [] vmalloc+0x5b/0x70 [ 1696.484353] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1696.484360] [] xt_alloc_entry_offsets+0x41/0x60 [ 1696.484368] [] translate_table+0x215/0x1690 [ 1696.484374] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1696.484382] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1696.484390] [] ? __check_object_size+0x248/0x38e [ 1696.484398] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1696.484406] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1696.484415] [] ? mutex_unlock+0x9/0x10 [ 1696.484424] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1696.484432] [] nf_setsockopt+0x6d/0xc0 [ 1696.484441] [] ipv6_setsockopt+0xc8/0x130 [ 1696.484449] [] tcp_setsockopt+0x88/0xe0 [ 1696.484458] [] sock_common_setsockopt+0x9a/0xe0 [ 1696.484467] [] SyS_setsockopt+0x166/0x260 [ 1696.484475] [] ? SyS_recv+0x40/0x40 [ 1696.484485] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1696.484492] [] ? SyS_clock_settime+0x220/0x220 [ 1696.484501] [] ? do_syscall_64+0x48/0x550 [ 1696.484508] [] ? SyS_recv+0x40/0x40 [ 1696.484516] [] do_syscall_64+0x19f/0x550 [ 1696.484524] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1696.484528] Mem-Info: [ 1696.484558] active_anon:69183 inactive_anon:324668 isolated_anon:0 [ 1696.484558] active_file:1430 inactive_file:4902 isolated_file:0 [ 1696.484558] unevictable:0 dirty:203 writeback:0 unstable:0 [ 1696.484558] slab_reclaimable:7039 slab_unreclaimable:66767 [ 1696.484558] mapped:56974 shmem:330484 pagetables:16253 bounce:0 [ 1696.484558] free:1085481 free_pcp:609 free_cma:0 [ 1696.484575] Node 0 active_anon:276732kB inactive_anon:1298672kB active_file:5720kB inactive_file:19608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:227896kB dirty:812kB writeback:0kB shmem:1321936kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1696.484603] DMA32 free:3008732kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1672kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1388kB local_pcp:652kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1696.484641] Normal free:1333192kB min:5580kB low:9168kB high:12756kB active_anon:276672kB inactive_anon:1298644kB active_file:5528kB inactive_file:19608kB unevictable:0kB writepending:780kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28156kB slab_unreclaimable:265396kB kernel_stack:22784kB pagetables:64788kB bounce:0kB free_pcp:1048kB local_pcp:344kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1696.484704] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 101*32kB (UM) 104*64kB (UM) 91*128kB (UM) 94*256kB (UM) 91*512kB (UM) 72*1024kB (UM) 55*2048kB (UM) 666*4096kB (UM) = 3008732kB Normal: 12853*4kB (UMEH) 8252*8kB (UMEH) 4871*16kB (UMEH) 5082*32kB (UMEH) 3379*64kB (UME) 1990*128kB (UM) 862*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1333284kB 336818 total pagecache pages [ 1696.484762] 0 pages in swap cache [ 1696.484766] Swap cache stats: add 0, delete 0, find 0/0 [ 1696.484768] Free swap = 0kB [ 1696.484771] Total swap = 0kB [ 1696.484773] 1965979 pages RAM [ 1696.484775] 0 pages HighMem/MovableOnly [ 1696.484778] 313617 pages reserved [ 1697.936188] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1697.936200] CPU: 1 PID: 17703 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1697.936217] ffff8801d1eaf888 ffffffff81b42e79 1ffff1003a3d5f13 ffff8801cefd5f00 [ 1697.936233] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801d1eaf9d0 [ 1697.936247] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1697.936250] Call Trace: [ 1697.936269] [] dump_stack+0xc1/0x128 [ 1697.936281] [] warn_alloc.cold.31+0x7f/0x9c [ 1697.936291] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1697.936300] [] ? depot_save_stack+0x11c/0x470 [ 1697.936310] [] ? save_stack_trace+0x16/0x20 [ 1697.936319] [] ? xt_alloc_table_info+0x70/0x100 [ 1697.936328] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1697.936336] [] ? nf_setsockopt+0x6d/0xc0 [ 1697.936345] [] ? check_preemption_disabled+0x3b/0x200 [ 1697.936354] [] __vmalloc_node_range+0x35e/0x600 [ 1697.936362] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1697.936370] [] vmalloc+0x5b/0x70 [ 1697.936378] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1697.936386] [] xt_alloc_entry_offsets+0x41/0x60 [ 1697.936394] [] translate_table+0x215/0x1690 [ 1697.936402] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1697.936411] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1697.936420] [] ? __check_object_size+0x248/0x38e [ 1697.936429] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1697.936438] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1697.936447] [] ? mutex_unlock+0x9/0x10 [ 1697.936456] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1697.936463] [] nf_setsockopt+0x6d/0xc0 [ 1697.936472] [] ipv6_setsockopt+0xc8/0x130 [ 1697.936479] [] tcp_setsockopt+0x88/0xe0 [ 1697.936486] [] sock_common_setsockopt+0x9a/0xe0 [ 1697.936493] [] SyS_setsockopt+0x166/0x260 [ 1697.936501] [] ? SyS_recv+0x40/0x40 [ 1697.936509] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1697.936517] [] ? SyS_clock_settime+0x220/0x220 [ 1697.936525] [] ? do_syscall_64+0x48/0x550 [ 1697.936532] [] ? SyS_recv+0x40/0x40 [ 1697.936539] [] do_syscall_64+0x19f/0x550 [ 1697.936547] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1697.936551] Mem-Info: [ 1697.936593] active_anon:73336 inactive_anon:324689 isolated_anon:0 [ 1697.936593] active_file:1430 inactive_file:5605 isolated_file:0 [ 1697.936593] unevictable:0 dirty:943 writeback:0 unstable:0 [ 1697.936593] slab_reclaimable:7047 slab_unreclaimable:66893 [ 1697.936593] mapped:57024 shmem:330506 pagetables:16312 bounce:0 [ 1697.936593] free:1080402 free_pcp:527 free_cma:0 [ 1697.936620] Node 0 active_anon:293344kB inactive_anon:1298756kB active_file:5720kB inactive_file:22420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228096kB dirty:3772kB writeback:0kB shmem:1322024kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1697.936663] DMA32 free:3009244kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1152kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1396kB local_pcp:740kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1697.936701] Normal free:1312364kB min:5580kB low:9168kB high:12756kB active_anon:293284kB inactive_anon:1298728kB active_file:5528kB inactive_file:22420kB unevictable:0kB writepending:3772kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28188kB slab_unreclaimable:266420kB kernel_stack:23072kB pagetables:65024kB bounce:0kB free_pcp:712kB local_pcp:152kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1697.936772] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 99*32kB (UM) 99*64kB (UM) 86*128kB (UM) 88*256kB (UM) 85*512kB (UM) 66*1024kB (UM) 49*2048kB (UM) 672*4096kB (UM) = 3009244kB Normal: 12185*4kB (UMEH) 7059*8kB (UMEH) 4437*16kB (UMEH) 5026*32kB (UMEH) 3379*64kB (UME) 1990*128kB (UM) 862*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1312332kB 337555 total pagecache pages [ 1697.936831] 0 pages in swap cache [ 1697.936836] Swap cache stats: add 0, delete 0, find 0/0 [ 1697.936838] Free swap = 0kB [ 1697.936840] Total swap = 0kB [ 1697.936842] 1965979 pages RAM [ 1697.936845] 0 pages HighMem/MovableOnly [ 1697.936847] 313617 pages reserved [ 1698.026177] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1698.026187] CPU: 1 PID: 17700 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1698.026203] ffff88019d15f888 ffffffff81b42e79 1ffff10033a2bf13 ffff88019c850000 [ 1698.026217] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019d15f9d0 [ 1698.026230] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1698.026231] Call Trace: [ 1698.026249] [] dump_stack+0xc1/0x128 [ 1698.026260] [] warn_alloc.cold.31+0x7f/0x9c [ 1698.026269] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1698.026278] [] ? depot_save_stack+0x11c/0x470 [ 1698.026288] [] ? save_stack_trace+0x16/0x20 [ 1698.026298] [] ? xt_alloc_table_info+0x70/0x100 [ 1698.026307] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1698.026315] [] ? nf_setsockopt+0x6d/0xc0 [ 1698.026323] [] ? check_preemption_disabled+0x3b/0x200 [ 1698.026332] [] __vmalloc_node_range+0x35e/0x600 [ 1698.026341] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1698.026348] [] vmalloc+0x5b/0x70 [ 1698.026356] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1698.026364] [] xt_alloc_entry_offsets+0x41/0x60 [ 1698.026372] [] translate_table+0x215/0x1690 [ 1698.026380] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1698.026389] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1698.026397] [] ? __check_object_size+0x248/0x38e [ 1698.026406] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1698.026415] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1698.026425] [] ? mutex_unlock+0x9/0x10 [ 1698.026433] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1698.026441] [] nf_setsockopt+0x6d/0xc0 [ 1698.026450] [] ipv6_setsockopt+0xc8/0x130 [ 1698.026458] [] tcp_setsockopt+0x88/0xe0 [ 1698.026467] [] sock_common_setsockopt+0x9a/0xe0 [ 1698.026474] [] SyS_setsockopt+0x166/0x260 [ 1698.026482] [] ? SyS_recv+0x40/0x40 [ 1698.026491] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1698.026499] [] ? SyS_clock_settime+0x220/0x220 [ 1698.026507] [] ? do_syscall_64+0x48/0x550 [ 1698.026514] [] ? SyS_recv+0x40/0x40 [ 1698.026521] [] do_syscall_64+0x19f/0x550 [ 1698.026530] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1698.026533] Mem-Info: [ 1698.026562] active_anon:73336 inactive_anon:324689 isolated_anon:0 [ 1698.026562] active_file:1430 inactive_file:5730 isolated_file:0 [ 1698.026562] unevictable:0 dirty:536 writeback:518 unstable:0 [ 1698.026562] slab_reclaimable:7047 slab_unreclaimable:66893 [ 1698.026562] mapped:57024 shmem:330506 pagetables:16312 bounce:0 [ 1698.026562] free:1080338 free_pcp:518 free_cma:0 [ 1698.026581] Node 0 active_anon:293344kB inactive_anon:1298756kB active_file:5720kB inactive_file:22920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228096kB dirty:2144kB writeback:2072kB shmem:1322024kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1698.026609] DMA32 free:3009244kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1152kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1396kB local_pcp:740kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1698.026640] Normal free:1312108kB min:5580kB low:9168kB high:12756kB active_anon:293284kB inactive_anon:1298728kB active_file:5528kB inactive_file:22920kB unevictable:0kB writepending:4216kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:28188kB slab_unreclaimable:266420kB kernel_stack:22880kB pagetables:65024kB bounce:0kB free_pcp:676kB local_pcp:120kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1698.026698] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 100*32kB (UM) 99*64kB (UM) 86*128kB (UM) 88*256kB (UM) 85*512kB (UM) 66*1024kB (UM) 49*2048kB (UM) 672*4096kB (UM) = 3009276kB Normal: 12184*4kB (UEH) 6982*8kB (UMEH) 4438*16kB (UMEH) 5034*32kB (UMEH) 3379*64kB (UME) 1990*128kB (UM) 862*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1311984kB 337666 total pagecache pages [ 1698.026756] 0 pages in swap cache [ 1698.026762] Swap cache stats: add 0, delete 0, find 0/0 [ 1698.026764] Free swap = 0kB [ 1698.026768] Total swap = 0kB [ 1698.026771] 1965979 pages RAM [ 1698.026773] 0 pages HighMem/MovableOnly [ 1698.026777] 313617 pages reserved [ 1699.255458] audit_printk_skb: 1425 callbacks suppressed [ 1699.255467] audit: type=1400 audit(1565077723.892:125366): avc: denied { sys_admin } for pid=2101 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1699.255899] audit: type=1400 audit(1565077723.892:125365): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1699.274566] audit: type=1400 audit(1565077723.902:125367): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1699.300202] audit: type=1400 audit(1565077723.932:125368): avc: denied { sys_admin } for pid=2101 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1699.308027] audit: type=1400 audit(1565077723.942:125369): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1699.312808] audit: type=1400 audit(1565077723.952:125370): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1699.319962] audit: type=1400 audit(1565077723.962:125371): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1699.327006] audit: type=1400 audit(1565077723.962:125372): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1699.336619] audit: type=1400 audit(1565077723.972:125373): avc: denied { dac_override } for pid=17729 comm="syz-executor.1" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1699.347714] audit: type=1400 audit(1565077723.982:125374): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1699.501656] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1699.501668] CPU: 0 PID: 17730 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1699.501685] ffff8801d876f888 ffffffff81b42e79 1ffff1003b0edf13 ffff8801c74e2f80 [ 1699.501699] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801d876f9d0 [ 1699.501712] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1699.501715] Call Trace: [ 1699.501731] [] dump_stack+0xc1/0x128 [ 1699.501742] [] warn_alloc.cold.31+0x7f/0x9c [ 1699.501750] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1699.501757] [] ? depot_save_stack+0x11c/0x470 [ 1699.501766] [] ? save_stack_trace+0x16/0x20 [ 1699.501773] [] ? xt_alloc_table_info+0x70/0x100 [ 1699.501781] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1699.501788] [] ? nf_setsockopt+0x6d/0xc0 [ 1699.501795] [] ? check_preemption_disabled+0x3b/0x200 [ 1699.501802] [] __vmalloc_node_range+0x35e/0x600 [ 1699.501809] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1699.501815] [] vmalloc+0x5b/0x70 [ 1699.501821] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1699.501828] [] xt_alloc_entry_offsets+0x41/0x60 [ 1699.501835] [] translate_table+0x215/0x1690 [ 1699.501841] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1699.501849] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1699.501856] [] ? __check_object_size+0x248/0x38e [ 1699.501863] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1699.501870] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1699.501878] [] ? mutex_unlock+0x9/0x10 [ 1699.501885] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1699.501892] [] nf_setsockopt+0x6d/0xc0 [ 1699.501901] [] ipv6_setsockopt+0xc8/0x130 [ 1699.501909] [] tcp_setsockopt+0x88/0xe0 [ 1699.501917] [] sock_common_setsockopt+0x9a/0xe0 [ 1699.501924] [] SyS_setsockopt+0x166/0x260 [ 1699.501932] [] ? SyS_recv+0x40/0x40 [ 1699.501954] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1699.501963] [] ? SyS_clock_settime+0x220/0x220 [ 1699.501972] [] ? do_syscall_64+0x48/0x550 [ 1699.501979] [] ? SyS_recv+0x40/0x40 [ 1699.501985] [] do_syscall_64+0x19f/0x550 [ 1699.501993] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1699.501996] Mem-Info: [ 1699.502014] active_anon:77490 inactive_anon:324619 isolated_anon:0 [ 1699.502014] active_file:1430 inactive_file:4929 isolated_file:0 [ 1699.502014] unevictable:0 dirty:203 writeback:0 unstable:0 [ 1699.502014] slab_reclaimable:6720 slab_unreclaimable:67263 [ 1699.502014] mapped:57030 shmem:330507 pagetables:16365 bounce:0 [ 1699.502014] free:1076876 free_pcp:509 free_cma:0 [ 1699.502030] Node 0 active_anon:309960kB inactive_anon:1298476kB active_file:5720kB inactive_file:19716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228120kB dirty:812kB writeback:0kB shmem:1322028kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1699.502047] DMA32 free:3009340kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1056kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1396kB local_pcp:656kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1699.502071] Normal free:1298164kB min:5580kB low:9168kB high:12756kB active_anon:309900kB inactive_anon:1298448kB active_file:5528kB inactive_file:19716kB unevictable:0kB writepending:812kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:26880kB slab_unreclaimable:267996kB kernel_stack:23264kB pagetables:65236kB bounce:0kB free_pcp:640kB local_pcp:312kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1699.502124] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 100*32kB (UM) 98*64kB (UM) 85*128kB (UM) 87*256kB (UM) 86*512kB (UM) 66*1024kB (UM) 49*2048kB (UM) 672*4096kB (UM) = 3009340kB Normal: 12219*4kB (UEH) 6916*8kB (UEH) 4160*16kB (UEH) 4747*32kB (UMEH) 3379*64kB (UME) 1990*128kB (UM) 863*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1298220kB 336867 total pagecache pages [ 1699.502171] 0 pages in swap cache [ 1699.502175] Swap cache stats: add 0, delete 0, find 0/0 [ 1699.502177] Free swap = 0kB [ 1699.502178] Total swap = 0kB [ 1699.502180] 1965979 pages RAM [ 1699.502181] 0 pages HighMem/MovableOnly [ 1699.502183] 313617 pages reserved [ 1699.915666] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1699.915679] CPU: 1 PID: 17741 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1699.915698] ffff88019e1ef888 ffffffff81b42e79 1ffff10033c3df13 ffff88019cae2f80 [ 1699.915711] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019e1ef9d0 [ 1699.915723] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1699.915725] Call Trace: [ 1699.915742] [] dump_stack+0xc1/0x128 [ 1699.915757] [] warn_alloc.cold.31+0x7f/0x9c [ 1699.915770] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1699.915783] [] ? depot_save_stack+0x11c/0x470 [ 1699.915794] [] ? save_stack_trace+0x16/0x20 [ 1699.915803] [] ? xt_alloc_table_info+0x70/0x100 [ 1699.915812] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1699.915821] [] ? nf_setsockopt+0x6d/0xc0 [ 1699.915830] [] ? check_preemption_disabled+0x3b/0x200 [ 1699.915838] [] __vmalloc_node_range+0x35e/0x600 [ 1699.915848] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1699.915855] [] vmalloc+0x5b/0x70 [ 1699.915863] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1699.915871] [] xt_alloc_entry_offsets+0x41/0x60 [ 1699.915879] [] translate_table+0x215/0x1690 [ 1699.915887] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1699.915896] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1699.915904] [] ? __check_object_size+0x248/0x38e [ 1699.915912] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1699.915920] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1699.915929] [] ? mutex_unlock+0x9/0x10 [ 1699.915936] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1699.915943] [] nf_setsockopt+0x6d/0xc0 [ 1699.915952] [] ipv6_setsockopt+0xc8/0x130 [ 1699.915960] [] tcp_setsockopt+0x88/0xe0 [ 1699.915969] [] sock_common_setsockopt+0x9a/0xe0 [ 1699.915977] [] SyS_setsockopt+0x166/0x260 [ 1699.915983] [] ? SyS_recv+0x40/0x40 [ 1699.915993] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1699.916001] [] ? SyS_clock_settime+0x220/0x220 [ 1699.916008] [] ? do_syscall_64+0x48/0x550 [ 1699.916016] [] ? SyS_recv+0x40/0x40 [ 1699.916022] [] do_syscall_64+0x19f/0x550 [ 1699.916031] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1699.916034] Mem-Info: [ 1699.916057] active_anon:73490 inactive_anon:324619 isolated_anon:0 [ 1699.916057] active_file:1430 inactive_file:5379 isolated_file:0 [ 1699.916057] unevictable:0 dirty:647 writeback:0 unstable:0 [ 1699.916057] slab_reclaimable:6720 slab_unreclaimable:67397 [ 1699.916057] mapped:57055 shmem:330507 pagetables:16365 bounce:0 [ 1699.916057] free:1080310 free_pcp:525 free_cma:0 [ 1699.916077] Node 0 active_anon:293960kB inactive_anon:1298476kB active_file:5720kB inactive_file:21516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228220kB dirty:2588kB writeback:0kB shmem:1322028kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1699.916099] DMA32 free:3009340kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1056kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1396kB local_pcp:740kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1699.916128] Normal free:1311900kB min:5580kB low:9168kB high:12756kB active_anon:293900kB inactive_anon:1298448kB active_file:5528kB inactive_file:21516kB unevictable:0kB writepending:2588kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:26880kB slab_unreclaimable:268532kB kernel_stack:23104kB pagetables:65236kB bounce:0kB free_pcp:704kB local_pcp:200kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1699.916179] DMA32: 81*4kB (UM) 73*8kB (UM) 83*16kB (UM) 100*32kB (UM) 98*64kB (UM) 85*128kB (UM) 87*256kB (UM) 86*512kB (UM) 66*1024kB (UM) 49*2048kB (UM) 672*4096kB (UM) = 3009340kB Normal: 12318*4kB (UMEH) 7573*8kB (UMEH) 4454*16kB (UMEH) 4847*32kB (UMEH) 3379*64kB (UME) 1990*128kB (UM) 863*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1311776kB 337311 total pagecache pages [ 1699.916230] 0 pages in swap cache [ 1699.916234] Swap cache stats: add 0, delete 0, find 0/0 [ 1699.916236] Free swap = 0kB [ 1699.916238] Total swap = 0kB [ 1699.916240] 1965979 pages RAM [ 1699.916243] 0 pages HighMem/MovableOnly [ 1699.916245] 313617 pages reserved [ 1702.008853] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1702.008864] CPU: 1 PID: 17790 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1702.008880] ffff8801d40c7888 ffffffff81b42e79 1ffff1003a818f13 ffff8801ce1b4740 [ 1702.008893] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801d40c79d0 [ 1702.008906] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1702.008909] Call Trace: [ 1702.008925] [] dump_stack+0xc1/0x128 [ 1702.008935] [] warn_alloc.cold.31+0x7f/0x9c [ 1702.008945] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1702.008953] [] ? depot_save_stack+0x11c/0x470 [ 1702.008963] [] ? save_stack_trace+0x16/0x20 [ 1702.008972] [] ? xt_alloc_table_info+0x70/0x100 [ 1702.008981] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1702.008990] [] ? nf_setsockopt+0x6d/0xc0 [ 1702.008998] [] ? check_preemption_disabled+0x3b/0x200 [ 1702.009006] [] __vmalloc_node_range+0x35e/0x600 [ 1702.009015] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1702.009022] [] vmalloc+0x5b/0x70 [ 1702.009030] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1702.009037] [] xt_alloc_entry_offsets+0x41/0x60 [ 1702.009046] [] translate_table+0x215/0x1690 [ 1702.009054] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1702.009062] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1702.009070] [] ? __check_object_size+0x248/0x38e [ 1702.009079] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1702.009087] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1702.009097] [] ? mutex_unlock+0x9/0x10 [ 1702.009105] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1702.009112] [] nf_setsockopt+0x6d/0xc0 [ 1702.009121] [] ipv6_setsockopt+0xc8/0x130 [ 1702.009129] [] tcp_setsockopt+0x88/0xe0 [ 1702.009138] [] sock_common_setsockopt+0x9a/0xe0 [ 1702.009146] [] SyS_setsockopt+0x166/0x260 [ 1702.009153] [] ? SyS_recv+0x40/0x40 [ 1702.009162] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1702.009170] [] ? SyS_clock_settime+0x220/0x220 [ 1702.009178] [] ? task_work_run+0x14a/0x180 [ 1702.009185] [] ? do_syscall_64+0x48/0x550 [ 1702.009192] [] ? SyS_recv+0x40/0x40 [ 1702.009199] [] do_syscall_64+0x19f/0x550 [ 1702.009208] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1702.009211] Mem-Info: [ 1702.009230] active_anon:77494 inactive_anon:324619 isolated_anon:0 [ 1702.009230] active_file:1430 inactive_file:4941 isolated_file:0 [ 1702.009230] unevictable:0 dirty:203 writeback:0 unstable:0 [ 1702.009230] slab_reclaimable:6456 slab_unreclaimable:68554 [ 1702.009230] mapped:57030 shmem:330507 pagetables:16422 bounce:0 [ 1702.009230] free:1075630 free_pcp:554 free_cma:0 [ 1702.009258] Node 0 active_anon:309976kB inactive_anon:1298476kB active_file:5720kB inactive_file:19764kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228120kB dirty:812kB writeback:0kB shmem:1322028kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1702.009286] DMA32 free:3009464kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1052kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1276kB local_pcp:620kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1702.009322] Normal free:1293056kB min:5580kB low:9168kB high:12756kB active_anon:309916kB inactive_anon:1298448kB active_file:5528kB inactive_file:19764kB unevictable:0kB writepending:812kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:25824kB slab_unreclaimable:273164kB kernel_stack:23392kB pagetables:65464kB bounce:0kB free_pcp:940kB local_pcp:412kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1702.009380] DMA32: 82*4kB (UM) 72*8kB (UM) 83*16kB (UM) 100*32kB (UM) 98*64kB (UM) 84*128kB (UM) 86*256kB (UM) 87*512kB (UM) 66*1024kB (UM) 49*2048kB (UM) 672*4096kB (UM) = 3009464kB Normal: 11858*4kB (UMEH) 6911*8kB (UEH) 4152*16kB (UEH) 4634*32kB (UMEH) 3380*64kB (UME) 1990*128kB (UM) 863*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1293056kB 336892 total pagecache pages [ 1702.009435] 0 pages in swap cache [ 1702.009440] Swap cache stats: add 0, delete 0, find 0/0 [ 1702.009442] Free swap = 0kB [ 1702.009444] Total swap = 0kB [ 1702.009446] 1965979 pages RAM [ 1702.009448] 0 pages HighMem/MovableOnly [ 1702.009450] 313617 pages reserved [ 1702.056354] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1702.056366] CPU: 0 PID: 17787 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1702.056382] ffff8801a6e47888 ffffffff81b42e79 1ffff10034dc8f13 ffff88019ce7c740 [ 1702.056394] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801a6e479d0 [ 1702.056405] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1702.056407] Call Trace: [ 1702.056423] [] dump_stack+0xc1/0x128 [ 1702.056437] [] warn_alloc.cold.31+0x7f/0x9c [ 1702.056453] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1702.056464] [] ? depot_save_stack+0x11c/0x470 [ 1702.056478] [] ? save_stack_trace+0x16/0x20 [ 1702.056489] [] ? xt_alloc_table_info+0x70/0x100 [ 1702.056501] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1702.056513] [] ? nf_setsockopt+0x6d/0xc0 [ 1702.056526] [] ? check_preemption_disabled+0x3b/0x200 [ 1702.056535] [] __vmalloc_node_range+0x35e/0x600 [ 1702.056547] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1702.056557] [] vmalloc+0x5b/0x70 [ 1702.056567] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1702.056574] [] xt_alloc_entry_offsets+0x41/0x60 [ 1702.056583] [] translate_table+0x215/0x1690 [ 1702.056591] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1702.056600] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1702.056609] [] ? __check_object_size+0x248/0x38e [ 1702.056617] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1702.056626] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1702.056636] [] ? mutex_unlock+0x9/0x10 [ 1702.056644] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1702.056652] [] nf_setsockopt+0x6d/0xc0 [ 1702.056661] [] ipv6_setsockopt+0xc8/0x130 [ 1702.056670] [] tcp_setsockopt+0x88/0xe0 [ 1702.056678] [] sock_common_setsockopt+0x9a/0xe0 [ 1702.056710] [] SyS_setsockopt+0x166/0x260 [ 1702.056720] [] ? SyS_recv+0x40/0x40 [ 1702.056731] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1702.056748] [] ? SyS_clock_settime+0x220/0x220 [ 1702.056758] [] ? do_syscall_64+0x48/0x550 [ 1702.056767] [] ? SyS_recv+0x40/0x40 [ 1702.056777] [] do_syscall_64+0x19f/0x550 [ 1702.056789] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1702.056792] Mem-Info: [ 1702.056812] active_anon:77494 inactive_anon:324619 isolated_anon:0 [ 1702.056812] active_file:1430 inactive_file:4966 isolated_file:0 [ 1702.056812] unevictable:0 dirty:203 writeback:0 unstable:0 [ 1702.056812] slab_reclaimable:6456 slab_unreclaimable:68579 [ 1702.056812] mapped:57030 shmem:330507 pagetables:16422 bounce:0 [ 1702.056812] free:1075631 free_pcp:530 free_cma:0 [ 1702.056827] Node 0 active_anon:309976kB inactive_anon:1298476kB active_file:5720kB inactive_file:19864kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228120kB dirty:812kB writeback:0kB shmem:1322028kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1702.056848] DMA32 free:3009464kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1052kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1276kB local_pcp:656kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1702.056882] Normal free:1293060kB min:5580kB low:9168kB high:12756kB active_anon:309916kB inactive_anon:1298448kB active_file:5528kB inactive_file:19864kB unevictable:0kB writepending:812kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:25824kB slab_unreclaimable:273264kB kernel_stack:23232kB pagetables:65464kB bounce:0kB free_pcp:844kB local_pcp:488kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1702.056944] DMA32: 82*4kB (UM) 72*8kB (UM) 83*16kB (UM) 100*32kB (UM) 98*64kB (UM) 84*128kB (UM) 86*256kB (UM) 87*512kB (UM) 66*1024kB (UM) 49*2048kB (UM) 672*4096kB (UM) = 3009464kB Normal: 11857*4kB (UEH) 6910*8kB (UMEH) 4151*16kB (UEH) 4634*32kB (UMEH) 3380*64kB (UME) 1990*128kB (UM) 863*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1293028kB 336929 total pagecache pages [ 1702.056995] 0 pages in swap cache [ 1702.056999] Swap cache stats: add 0, delete 0, find 0/0 [ 1702.057002] Free swap = 0kB [ 1702.057004] Total swap = 0kB [ 1702.057006] 1965979 pages RAM [ 1702.057008] 0 pages HighMem/MovableOnly [ 1702.057010] 313617 pages reserved [ 1704.159601] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1704.159611] CPU: 1 PID: 17838 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1704.159628] ffff88018f0b7888 ffffffff81b42e79 1ffff10031e16f13 ffff8801c4152f80 [ 1704.159642] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88018f0b79d0 [ 1704.159656] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1704.159659] Call Trace: [ 1704.159674] [] dump_stack+0xc1/0x128 [ 1704.159685] [] warn_alloc.cold.31+0x7f/0x9c [ 1704.159700] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1704.159708] [] ? depot_save_stack+0x11c/0x470 [ 1704.159718] [] ? save_stack_trace+0x16/0x20 [ 1704.159727] [] ? xt_alloc_table_info+0x70/0x100 [ 1704.159736] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1704.159745] [] ? nf_setsockopt+0x6d/0xc0 [ 1704.159754] [] ? check_preemption_disabled+0x3b/0x200 [ 1704.159762] [] __vmalloc_node_range+0x35e/0x600 [ 1704.159771] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1704.159778] [] vmalloc+0x5b/0x70 [ 1704.159786] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1704.159793] [] xt_alloc_entry_offsets+0x41/0x60 [ 1704.159802] [] translate_table+0x215/0x1690 [ 1704.159810] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1704.159819] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1704.159827] [] ? __check_object_size+0x248/0x38e [ 1704.159836] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1704.159844] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1704.159854] [] ? mutex_unlock+0x9/0x10 [ 1704.159862] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1704.159869] [] nf_setsockopt+0x6d/0xc0 [ 1704.159878] [] ipv6_setsockopt+0xc8/0x130 [ 1704.159886] [] tcp_setsockopt+0x88/0xe0 [ 1704.159895] [] sock_common_setsockopt+0x9a/0xe0 [ 1704.159903] [] SyS_setsockopt+0x166/0x260 [ 1704.159910] [] ? SyS_recv+0x40/0x40 [ 1704.159919] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1704.159927] [] ? SyS_clock_settime+0x220/0x220 [ 1704.159935] [] ? do_syscall_64+0x48/0x550 [ 1704.159942] [] ? SyS_recv+0x40/0x40 [ 1704.159949] [] do_syscall_64+0x19f/0x550 [ 1704.159957] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1704.159961] Mem-Info: [ 1704.159981] active_anon:69411 inactive_anon:324621 isolated_anon:0 [ 1704.159981] active_file:1431 inactive_file:5024 isolated_file:0 [ 1704.159981] unevictable:0 dirty:206 writeback:2 unstable:0 [ 1704.159981] slab_reclaimable:6263 slab_unreclaimable:69845 [ 1704.159981] mapped:57046 shmem:330508 pagetables:16500 bounce:0 [ 1704.159981] free:1082467 free_pcp:629 free_cma:0 [ 1704.159998] Node 0 active_anon:277644kB inactive_anon:1298484kB active_file:5724kB inactive_file:20096kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228184kB dirty:824kB writeback:8kB shmem:1322032kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1704.160023] DMA32 free:3009464kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1052kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1276kB local_pcp:620kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1704.160052] Normal free:1320404kB min:5580kB low:9168kB high:12756kB active_anon:277584kB inactive_anon:1298456kB active_file:5532kB inactive_file:20096kB unevictable:0kB writepending:832kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:25052kB slab_unreclaimable:278328kB kernel_stack:23200kB pagetables:65776kB bounce:0kB free_pcp:1240kB local_pcp:676kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1704.160127] DMA32: 82*4kB (UM) 72*8kB (UM) 83*16kB (UM) 100*32kB (UM) 98*64kB (UM) 84*128kB (UM) 86*256kB (UM) 87*512kB (UM) 66*1024kB (UM) 49*2048kB (UM) 672*4096kB (UM) = 3009464kB Normal: 12273*4kB (UMEH) 8076*8kB (UMEH) 4733*16kB (UMEH) 4839*32kB (UMEH) 3384*64kB (UME) 1991*128kB (UME) 863*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1320276kB 337000 total pagecache pages [ 1704.160182] 0 pages in swap cache [ 1704.160186] Swap cache stats: add 0, delete 0, find 0/0 [ 1704.160188] Free swap = 0kB [ 1704.160190] Total swap = 0kB [ 1704.160193] 1965979 pages RAM [ 1704.160195] 0 pages HighMem/MovableOnly [ 1704.160197] 313617 pages reserved [ 1704.261641] audit_printk_skb: 1692 callbacks suppressed [ 1704.261650] audit: type=1400 audit(1565077728.902:125939): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1704.300892] audit: type=1400 audit(1565077728.932:125941): avc: denied { sys_admin } for pid=2100 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1704.303791] audit: type=1400 audit(1565077728.902:125940): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1704.313243] audit: type=1400 audit(1565077728.942:125942): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1704.328254] audit: type=1400 audit(1565077728.962:125943): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1704.330399] audit: type=1400 audit(1565077728.972:125944): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1704.332504] audit: type=1400 audit(1565077728.972:125945): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1704.334326] audit: type=1400 audit(1565077728.972:125946): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1704.336157] audit: type=1400 audit(1565077728.972:125947): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1704.337990] audit: type=1400 audit(1565077728.972:125948): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1708.979887] syz-executor.0: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1708.979899] CPU: 1 PID: 17949 Comm: syz-executor.0 Not tainted 4.9.141+ #1 [ 1708.979917] ffff8801d6cb7888 ffffffff81b42e79 1ffff1003ad96f13 ffff8801c4ae17c0 [ 1708.979930] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801d6cb79d0 [ 1708.979943] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1708.979945] Call Trace: [ 1708.979959] [] dump_stack+0xc1/0x128 [ 1708.979969] [] warn_alloc.cold.31+0x7f/0x9c [ 1708.979980] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1708.979992] [] ? depot_save_stack+0x11c/0x470 [ 1708.980002] [] ? save_stack_trace+0x16/0x20 [ 1708.980011] [] ? xt_alloc_table_info+0x70/0x100 [ 1708.980020] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1708.980028] [] ? nf_setsockopt+0x6d/0xc0 [ 1708.980037] [] ? check_preemption_disabled+0x3b/0x200 [ 1708.980045] [] __vmalloc_node_range+0x35e/0x600 [ 1708.980054] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1708.980061] [] vmalloc+0x5b/0x70 [ 1708.980069] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1708.980077] [] xt_alloc_entry_offsets+0x41/0x60 [ 1708.980093] [] translate_table+0x215/0x1690 [ 1708.980102] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1708.980112] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1708.980124] [] ? __check_object_size+0x248/0x38e [ 1708.980135] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1708.980146] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1708.980160] [] ? mutex_unlock+0x9/0x10 [ 1708.980171] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1708.980180] [] nf_setsockopt+0x6d/0xc0 [ 1708.980190] [] ipv6_setsockopt+0xc8/0x130 [ 1708.980198] [] tcp_setsockopt+0x88/0xe0 [ 1708.980207] [] sock_common_setsockopt+0x9a/0xe0 [ 1708.980214] [] SyS_setsockopt+0x166/0x260 [ 1708.980222] [] ? SyS_recv+0x40/0x40 [ 1708.980231] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1708.980240] [] ? SyS_clock_settime+0x220/0x220 [ 1708.980247] [] ? do_syscall_64+0x48/0x550 [ 1708.980254] [] ? SyS_recv+0x40/0x40 [ 1708.980261] [] do_syscall_64+0x19f/0x550 [ 1708.980270] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1709.009829] Mem-Info: [ 1709.009856] active_anon:78169 inactive_anon:324604 isolated_anon:0 [ 1709.009856] active_file:1431 inactive_file:4890 isolated_file:0 [ 1709.009856] unevictable:0 dirty:206 writeback:0 unstable:0 [ 1709.009856] slab_reclaimable:6272 slab_unreclaimable:70360 [ 1709.009856] mapped:57050 shmem:330505 pagetables:16473 bounce:0 [ 1709.009856] free:1073955 free_pcp:532 free_cma:0 [ 1709.009875] Node 0 active_anon:312676kB inactive_anon:1298416kB active_file:5724kB inactive_file:19560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228200kB dirty:824kB writeback:0kB shmem:1322020kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1709.009902] DMA32 free:3009464kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1048kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1280kB local_pcp:620kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1709.009937] Normal free:1286356kB min:5580kB low:9168kB high:12756kB active_anon:312616kB inactive_anon:1298388kB active_file:5532kB inactive_file:19560kB unevictable:0kB writepending:824kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:25088kB slab_unreclaimable:280392kB kernel_stack:23328kB pagetables:65668kB bounce:0kB free_pcp:848kB local_pcp:396kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1709.009995] DMA32: 82*4kB (UM) 72*8kB (UM) 83*16kB (UM) 100*32kB (UM) 98*64kB (UM) 84*128kB (UM) 86*256kB (UM) 87*512kB (UM) 66*1024kB (UM) 49*2048kB (UM) 672*4096kB (UM) = 3009464kB Normal: 11403*4kB (UMEH) 6867*8kB (UMEH) 4055*16kB (UEH) 4488*32kB (UMEH) 3395*64kB (UME) 1995*128kB (UME) 863*256kB (UME) 330*512kB (UM) 78*1024kB (UM) 11*2048kB (U) 3*4096kB (U) = 1286260kB 336826 total pagecache pages [ 1709.010049] 0 pages in swap cache [ 1709.010053] Swap cache stats: add 0, delete 0, find 0/0 [ 1709.010055] Free swap = 0kB [ 1709.010057] Total swap = 0kB [ 1709.010060] 1965979 pages RAM [ 1709.010062] 0 pages HighMem/MovableOnly [ 1709.010064] 313617 pages reserved [ 1709.269372] audit_printk_skb: 1359 callbacks suppressed [ 1709.269381] audit: type=1400 audit(1565077733.912:126402): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1709.274631] audit: type=1400 audit(1565077733.912:126403): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1709.276676] audit: type=1400 audit(1565077733.912:126404): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1709.278796] audit: type=1400 audit(1565077733.912:126405): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1709.299084] audit: type=1400 audit(1565077733.942:126406): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1709.312856] audit: type=1400 audit(1565077733.952:126409): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1709.313964] audit: type=1400 audit(1565077733.942:126408): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1709.316236] audit: type=1400 audit(1565077733.942:126407): avc: denied { sys_admin } for pid=2101 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1709.317749] audit: type=1400 audit(1565077733.952:126410): avc: denied { net_admin } for pid=2102 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1709.321292] audit: type=1400 audit(1565077733.962:126412): avc: denied { sys_admin } for pid=2101 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1714.286578] audit_printk_skb: 1245 callbacks suppressed [ 1714.286587] audit: type=1400 audit(1565077738.922:126827): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1714.305965] audit: type=1400 audit(1565077738.922:126828): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1714.308098] audit: type=1400 audit(1565077738.942:126829): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1714.327472] audit: type=1400 audit(1565077738.962:126830): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1714.354780] audit: type=1400 audit(1565077738.992:126831): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1714.359912] audit: type=1400 audit(1565077739.002:126832): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1714.375467] audit: type=1400 audit(1565077739.012:126833): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1714.392089] audit: type=1400 audit(1565077739.022:126834): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1714.394695] audit: type=1400 audit(1565077739.032:126835): avc: denied { dac_override } for pid=18045 comm="syz-executor.5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1714.403521] audit: type=1400 audit(1565077739.042:126836): avc: denied { net_admin } for pid=2101 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1718.382914] syz-executor.5: vmalloc: allocation failure: 10938744832 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 1718.382924] CPU: 0 PID: 18104 Comm: syz-executor.5 Not tainted 4.9.141+ #1 [ 1718.382942] ffff88019aac7888 ffffffff81b42e79 1ffff10033558f13 ffff8801a48797c0 [ 1718.382956] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff88019aac79d0 [ 1718.382970] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 1718.382972] Call Trace: [ 1718.382989] [] dump_stack+0xc1/0x128 [ 1718.383001] [] warn_alloc.cold.31+0x7f/0x9c [ 1718.383011] [] ? zone_watermark_ok_safe+0x250/0x250 [ 1718.383019] [] ? depot_save_stack+0x11c/0x470 [ 1718.383030] [] ? save_stack_trace+0x16/0x20 [ 1718.383040] [] ? xt_alloc_table_info+0x70/0x100 [ 1718.383050] [] ? do_ip6t_set_ctl+0x235/0x470 [ 1718.383058] [] ? nf_setsockopt+0x6d/0xc0 [ 1718.383067] [] ? check_preemption_disabled+0x3b/0x200 [ 1718.383075] [] __vmalloc_node_range+0x35e/0x600 [ 1718.383084] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 1718.383092] [] vmalloc+0x5b/0x70 [ 1718.383099] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 1718.383107] [] xt_alloc_entry_offsets+0x41/0x60 [ 1718.383116] [] translate_table+0x215/0x1690 [ 1718.383124] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1718.383133] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 1718.383142] [] ? __check_object_size+0x248/0x38e [ 1718.383150] [] do_ip6t_set_ctl+0x2ce/0x470 [ 1718.383159] [] ? compat_do_ip6t_set_ctl+0x140/0x140 [ 1718.383169] [] ? mutex_unlock+0x9/0x10 [ 1718.383178] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 1718.383186] [] nf_setsockopt+0x6d/0xc0 [ 1718.383195] [] ipv6_setsockopt+0xc8/0x130 [ 1718.383203] [] tcp_setsockopt+0x88/0xe0 [ 1718.383212] [] sock_common_setsockopt+0x9a/0xe0 [ 1718.383220] [] SyS_setsockopt+0x166/0x260 [ 1718.383227] [] ? SyS_recv+0x40/0x40 [ 1718.383236] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1718.383245] [] ? SyS_clock_settime+0x220/0x220 [ 1718.383253] [] ? do_syscall_64+0x48/0x550 [ 1718.383260] [] ? SyS_recv+0x40/0x40 [ 1718.383267] [] do_syscall_64+0x19f/0x550 [ 1718.383276] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1718.383280] Mem-Info: [ 1718.383299] active_anon:69904 inactive_anon:324582 isolated_anon:0 [ 1718.383299] active_file:1467 inactive_file:4929 isolated_file:0 [ 1718.383299] unevictable:0 dirty:154 writeback:0 unstable:0 [ 1718.383299] slab_reclaimable:6275 slab_unreclaimable:70709 [ 1718.383299] mapped:57071 shmem:330505 pagetables:16512 bounce:0 [ 1718.383299] free:1081825 free_pcp:585 free_cma:0 [ 1718.383315] Node 0 active_anon:279616kB inactive_anon:1298328kB active_file:5868kB inactive_file:19716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228284kB dirty:616kB writeback:0kB shmem:1322020kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 1718.383336] DMA32 free:3009464kB min:4696kB low:7712kB high:10728kB active_anon:60kB inactive_anon:28kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:1048kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:1280kB local_pcp:660kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 1718.383365] Normal free:1317836kB min:5580kB low:9168kB high:12756kB active_anon:279556kB inactive_anon:1298300kB active_file:5676kB inactive_file:19716kB unevictable:0kB writepending:616kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:25100kB slab_unreclaimable:281788kB kernel_stack:23072kB pagetables:65824kB bounce:0kB free_pcp:1060kB local_pcp:340kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 1718.383428] DMA32: 82*4kB (UM) 72*8kB (UM) 83*16kB (UM) 100*32kB (UM) 98*64kB (UM) 84*128kB (UM) 86*256kB (UM) 87*512kB (UM) 66*1024kB (UM) 49*2048kB (UM) 672*4096kB (UM) = 3009464kB Normal: 11891*4kB (UMEH) 8259*8kB (UMEH) 4546*16kB (UMEH) 4778*32kB (UMEH) 3397*64kB (UME) 1985*128kB (UME) 869*256kB (UME) 330*512kB (UM) 77*1024kB (UM) 12*2048kB (U) 3*4096kB (U) = 1317892kB 336913 total pagecache pages [ 1718.383504] 0 pages in swap cache [ 1718.383509] Swap cache stats: add 0, delete 0, find 0/0 [ 1718.383513] Free swap = 0kB [ 1718.383515] Total swap = 0kB [ 1718.383517] 1965979 pages RAM [ 1718.383521] 0 pages HighMem/MovableOnly [ 1718.383523] 313617 pages reserved [ 1719.297379] audit_printk_skb: 1128 callbacks suppressed [ 1719.297389] audit: type=1400 audit(1565077743.932:127213): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1719.304718] audit: type=1400 audit(1565077743.942:127214): avc: denied { dac_override } for pid=18111 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1719.328159] audit: type=1400 audit(1565077743.962:127215): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1719.330464] audit: type=1400 audit(1565077743.972:127216): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1719.336615] audit: type=1400 audit(1565077743.972:127217): avc: denied { dac_override } for pid=18120 comm="syz-executor.1" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1719.360738] audit: type=1400 audit(1565077744.002:127218): avc: denied { net_admin } for pid=2099 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1719.367141] audit: type=1400 audit(1565077744.002:127219): avc: denied { read } for pid=18122 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1719.371404] audit: type=1400 audit(1565077744.012:127220): avc: denied { dac_override } for pid=18120 comm="syz-executor.1" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1719.376892] audit: type=1400 audit(1565077744.012:127221): avc: denied { create } for pid=18122 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1719.378278] audit: type=1400 audit(1565077744.012:127222): avc: denied { write } for pid=18122 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1719.619668] INFO: task init:13732 blocked for more than 140 seconds. [ 1719.619674] Not tainted 4.9.141+ #1 [ 1719.619677] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1719.619697] init D28232 13732 1 0x00000000 [ 1719.619712] ffff88019e1397c0 0000000000000000 ffff8801d871f380 ffff8801da6b2f80 [ 1719.619722] ffff8801db721018 ffff88019a58f738 ffffffff828075c2 0000000000000000 [ 1719.619733] ffff88019e13a070 ffffed0033c2740d 00ff88019e1397c0 ffff8801db7218f0 [ 1719.619734] Call Trace: [ 1719.619751] [] ? __schedule+0x662/0x1b10 [ 1719.619760] [] schedule+0x7f/0x1b0 [ 1719.619768] [] schedule_preempt_disabled+0x13/0x20 [ 1719.619775] [] mutex_lock_nested+0x38d/0x900 [ 1719.619785] [] ? tty_open+0x476/0xdf0 [ 1719.619793] [] ? mutex_trylock+0x3e0/0x3e0 [ 1719.619803] [] ? kmem_cache_alloc_trace+0x117/0x2e0 [ 1719.619810] [] tty_open+0x476/0xdf0 [ 1719.619817] [] ? tty_init_dev+0x430/0x430 [ 1719.619826] [] ? chrdev_open+0xc7/0x5c0 [ 1719.619834] [] ? tty_init_dev+0x430/0x430 [ 1719.619850] [] chrdev_open+0x22d/0x5c0 [ 1719.619858] [] ? cdev_put.part.0+0x50/0x50 [ 1719.619867] [] do_dentry_open+0x3ef/0xc90 [ 1719.619875] [] ? cdev_put.part.0+0x50/0x50 [ 1719.619883] [] vfs_open+0x11c/0x210 [ 1719.619890] [] ? may_open.isra.20+0x14f/0x2a0 [ 1719.619898] [] path_openat+0x542/0x2790 [ 1719.619905] [] ? path_mountpoint+0x6c0/0x6c0 [ 1719.619914] [] ? trace_hardirqs_on+0x10/0x10 [ 1719.619924] [] ? expand_files.part.3+0x3a9/0x6d0 [ 1719.619932] [] do_filp_open+0x197/0x270 [ 1719.619939] [] ? may_open_dev+0xe0/0xe0 [ 1719.619946] [] ? _raw_spin_unlock+0x2c/0x50 [ 1719.619954] [] ? __alloc_fd+0x1d7/0x4a0 [ 1719.619962] [] do_sys_open+0x30d/0x5c0 [ 1719.619968] [] ? filp_open+0x70/0x70 [ 1719.619973] [] ? _raw_write_unlock_irq+0x27/0x50 [ 1719.619980] [] SyS_open+0x2d/0x40 [ 1719.619986] [] ? do_sys_open+0x5c0/0x5c0 [ 1719.619993] [] do_syscall_64+0x19f/0x550 [ 1719.620001] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1719.620004] [ 1719.620004] Showing all locks held in the system: [ 1719.620011] 2 locks held by khungtaskd/24: [ 1719.620025] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 [ 1719.620038] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 [ 1719.620051] 1 lock held by rsyslogd/1914: [ 1719.620062] #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 [ 1719.620066] 2 locks held by getty/2042: [ 1719.620080] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 1719.620093] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 [ 1719.620100] 2 locks held by kworker/u4:3/2115: [ 1719.620114] #0: ("events_unbound"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 1719.620126] #1: ((&sub_info->work)){+.+.+.}, at: [] process_one_work+0x774/0x15f0 [ 1719.620205] 1 lock held by init/13732: [ 1719.620219] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 1719.620227] 1 lock held by init/16679: [ 1719.620236] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 1719.620240] 1 lock held by init/16680: [ 1719.620250] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 1719.620254] 1 lock held by init/16681: [ 1719.620267] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 1719.620271] 1 lock held by init/16682: [ 1719.620281] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 1719.620288] [ 1719.620289] ============================================= [ 1719.620289] [ 1719.620293] NMI backtrace for cpu 1 [ 1719.620300] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #1 [ 1719.620312] ffff8801d9907d08 ffffffff81b42e79 0000000000000000 0000000000000001 [ 1719.620321] 0000000000000001 0000000000000001 ffffffff810983b0 ffff8801d9907d40 [ 1719.620330] ffffffff81b4df89 0000000000000001 0000000000000000 0000000000000002 [ 1719.620331] Call Trace: [ 1719.620341] [] dump_stack+0xc1/0x128 [ 1719.620350] [] ? irq_force_complete_move+0x330/0x330 [ 1719.620357] [] nmi_cpu_backtrace.cold.0+0x48/0x87 [ 1719.620365] [] ? irq_force_complete_move+0x330/0x330 [ 1719.620372] [] nmi_trigger_cpumask_backtrace+0x12c/0x151 [ 1719.620381] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1719.620387] [] watchdog+0x6ad/0xa20 [ 1719.620394] [] ? watchdog+0x11c/0xa20 [ 1719.620403] [] kthread+0x26d/0x300 [ 1719.620410] [] ? reset_hung_task_detector+0x20/0x20 [ 1719.620417] [] ? kthread_park+0xa0/0xa0 [ 1719.620425] [] ? __switch_to_asm+0x34/0x70 [ 1719.620432] [] ? kthread_park+0xa0/0xa0 [ 1719.620439] [] ? kthread_park+0xa0/0xa0 [ 1719.620446] [] ret_from_fork+0x5c/0x70 [ 1719.620451] Sending NMI from CPU 1 to CPUs 0: [ 1719.620845] NMI backtrace for cpu 0 [ 1719.620848] CPU: 0 PID: 18130 Comm: modprobe Not tainted 4.9.141+ #1 [ 1719.620850] task: ffff8801a798df00 task.stack: ffff88019c838000 [ 1719.620853] RIP: 0010:[] c [] __lock_acquire+0x296/0x4a10 [ 1719.620855] RSP: 0018:ffff88019c83f4c0 EFLAGS: 00000016 [ 1719.620858] RAX: ffff8801a798e800 RBX: 0000000000000078 RCX: 0000000000000002 [ 1719.620860] RDX: 0000000000000001 RSI: 0000000000000042 RDI: ffff8801a798e820 [ 1719.620863] RBP: ffff88019c83f670 R08: 0000000000000000 R09: 0000000000000001 [ 1719.620865] R10: ffff8801a798df00 R11: 1ffff10034f31d04 R12: 000000000000001e [ 1719.620868] R13: 0000000000000003 R14: ffffffff830cc360 R15: 0000000000000000 [ 1719.620871] FS: 00007fee3f48c700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 1719.620873] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1719.620876] CR2: 00007fee3ee0d1e1 CR3: 00000001c8484000 CR4: 00000000001606b0 [ 1719.620879] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1719.620881] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1719.620883] Stack: [ 1719.620886] ffffffff8150645dc ffffffff810056efc ffffffff82817893c ffffffffffffffffc [ 1719.620889] 000000000000001ec 0000000000000001c ffff8801a798e79cc 0000000000000000c [ 1719.620891] ffff88019c83f6b8c ffff8801a798e818c ffff8801a798e7a0c ffff8801a798e820c [ 1719.620893] Call Trace: [ 1719.620895] [] ? SyS_open+0x2d/0x40 [ 1719.620897] [] ? do_syscall_64+0x19f/0x550 [ 1719.620900] [] ? entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1719.620902] [] ? trace_hardirqs_on+0x10/0x10 [ 1719.620904] [] ? trace_hardirqs_on+0x10/0x10 [ 1719.620907] [] ? trace_hardirqs_on+0x10/0x10 [ 1719.620909] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1719.620911] [] lock_acquire+0x130/0x3e0 [ 1719.620913] [] ? avc_alloc_node+0x1f2/0x3c0 [ 1719.620915] [] avc_alloc_node+0x224/0x3c0 [ 1719.620918] [] ? avc_alloc_node+0x1f2/0x3c0 [ 1719.620920] [] avc_compute_av+0x178/0x610 [ 1719.620922] [] ? avc_compute_av+0xb0/0x610 [ 1719.620924] [] avc_has_perm_noaudit+0x29d/0x2f0 [ 1719.620927] [] ? avc_has_perm_noaudit+0x90/0x2f0 [ 1719.620929] [] ? avc_has_extended_perms+0xd90/0xd90 [ 1719.620931] [] ? do_syscall_64+0x19f/0x550 [ 1719.620934] [] selinux_inode_permission+0x32d/0x4b0 [ 1719.620936] [] ? audit_inode_permission+0x310/0x310 [ 1719.620939] [] security_inode_permission+0xb9/0x100 [ 1719.620941] [] __inode_permission2+0x93/0x2d0 [ 1719.620943] [] inode_permission2+0x2f/0x110 [ 1719.620945] [] link_path_walk+0x1a5/0x1230 [ 1719.620948] [] ? path_init+0xf39/0x1570 [ 1719.620950] [] ? walk_component+0xcf0/0xcf0 [ 1719.620952] [] ? __mutex_init+0xca/0x100 [ 1719.620954] [] path_openat+0x1b7/0x2790 [ 1719.620956] [] ? getname+0x19/0x20 [ 1719.620959] [] ? do_sys_open+0x20b/0x5c0 [ 1719.620961] [] ? entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1719.620963] [] ? path_mountpoint+0x6c0/0x6c0 [ 1719.620966] [] ? trace_hardirqs_on+0x10/0x10 [ 1719.620968] [] ? expand_files.part.3+0x3a9/0x6d0 [ 1719.620970] [] do_filp_open+0x197/0x270 [ 1719.620972] [] ? may_open_dev+0xe0/0xe0 [ 1719.620975] [] ? _raw_spin_unlock+0x2c/0x50 [ 1719.620977] [] ? __alloc_fd+0x1d7/0x4a0 [ 1719.620979] [] do_sys_open+0x30d/0x5c0 [ 1719.620981] [] ? filp_open+0x70/0x70 [ 1719.620983] [] SyS_open+0x2d/0x40 [ 1719.620985] [] ? do_sys_open+0x5c0/0x5c0 [ 1719.620988] [] do_syscall_64+0x19f/0x550 [ 1719.620990] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1719.620998] Code: cf6 c74 c0a c40 c80 cfe c03 c0f c8e c99 c13 c00 c00 c0f cb7 c70 c20 c81 ce6 cff c1f c00 c00 c44 c39 ce6 c75 c0f c48 c83 cbc c24 c98 c00 c00 c00 c00 c0f c85 c5e c09 c00 c00 c<48> c03 c9c c24 c88 c00 c00 c00 c44 c89 ce6 c66 c81 ce6 cff c1f c48 c8d c43 c20 c48 c [ 1719.621468] Kernel panic - not syncing: hung_task: blocked tasks [ 1719.621474] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #1 [ 1719.621485] ffff8801d9907cc8 ffffffff81b42e79 ffffffff82a78560 00000000ffffffff [ 1719.621495] 0000000000000000 0000000000000001 dffffc0000000000 ffff8801d9907d88 [ 1719.621505] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 1719.621506] Call Trace: [ 1719.621514] [] dump_stack+0xc1/0x128 [ 1719.621521] [] panic+0x1bf/0x39f [ 1719.621529] [] ? add_taint.cold.5+0x16/0x16 [ 1719.621536] [] ? nmi_trigger_cpumask_backtrace+0x102/0x151 [ 1719.621543] [] watchdog+0x6be/0xa20 [ 1719.621550] [] ? watchdog+0x11c/0xa20 [ 1719.621557] [] kthread+0x26d/0x300 [ 1719.621564] [] ? reset_hung_task_detector+0x20/0x20 [ 1719.621571] [] ? kthread_park+0xa0/0xa0 [ 1719.621579] [] ? __switch_to_asm+0x34/0x70 [ 1719.621585] [] ? kthread_park+0xa0/0xa0 [ 1719.621593] [] ? kthread_park+0xa0/0xa0 [ 1719.621599] [] ret_from_fork+0x5c/0x70 [ 1719.622142] Kernel Offset: disabled [ 1731.164481] Rebooting in 86400 seconds..