19d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r3 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:46 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x0, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2385.715640] input: syz1 as /devices/virtual/input/input1762
16:57:46 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:46 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{0x0, 0x40000}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0)
write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x4049b0d8f5a38cd0, 0x5, {0x7, 0x1c, 0x9, 0x40, 0x0, 0x1ff, 0x10000, 0x7}}, 0x50)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:57:46 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0x0, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:46 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
splice(r0, &(0x7f0000001340), r0, &(0x7f00000013c0), 0x2, 0x8)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00')
readahead(r0, 0x6, 0x9)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040))
preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000080)=""/253, 0xfd}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/173, 0xad}], 0x3, 0x0)

16:57:46 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x6, 0x420480)
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x670, 0x2, 0xa2, 0x3, 0x2, 0x3e, 0xb3e, 0x238, 0x40, 0x148, 0x400, 0x8, 0x38, 0x1, 0x5, 0xffffffff, 0x5}, [{0x4, 0x10000, 0x5, 0x27a8, 0x81, 0x0, 0x6, 0x3}], "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", [[], [], [], [], [], [], [], []]}, 0x1878)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000001c80)={'team_slave_1\x00', @ifru_mtu=0x8})
sendmmsg(r2, &(0x7f00000002c0), 0x400000000000027, 0xa00)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f00000001c0)="5b9776626f786e6574316c6f292300")
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001b80)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={@empty, 0x24, r3})
r4 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x0, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)

[ 2385.965779] input: syz1 as /devices/virtual/input/input1764
16:57:46 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2386.044102] syz-executor1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0
[ 2386.104668] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2386.110490] CPU: 0 PID: 1614 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2386.117765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2386.127141] Call Trace:
[ 2386.129759]  dump_stack+0x244/0x39d
[ 2386.133399]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2386.138613]  ? mark_held_locks+0x130/0x130
[ 2386.142880]  ? mark_held_locks+0x130/0x130
[ 2386.147129]  dump_header+0x27b/0xf72
[ 2386.150943]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.156493]  ? check_preemption_disabled+0x48/0x280
[ 2386.161546]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.167088]  ? pagefault_out_of_memory+0x197/0x197
[ 2386.172026]  ? debug_smp_processor_id+0x1c/0x20
[ 2386.176718]  ? perf_trace_lock+0x14d/0x7a0
[ 2386.180980]  ? debug_smp_processor_id+0x1c/0x20
[ 2386.185654]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2386.190599]  ? lock_is_held_type+0x210/0x210
[ 2386.195021]  ? perf_trace_lock+0x7a0/0x7a0
[ 2386.199263]  ? debug_smp_processor_id+0x1c/0x20
[ 2386.199356]  ? perf_trace_lock+0x14d/0x7a0
[ 2386.199373]  ? zap_class+0x640/0x640
[ 2386.208291]  ? print_usage_bug+0xc0/0xc0
[ 2386.208308]  ? lock_is_held_type+0x210/0x210
[ 2386.208351]  ? find_held_lock+0x36/0x1c0
[ 2386.208375]  ? mark_held_locks+0xc7/0x130
[ 2386.208392]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2386.233894]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2386.239015]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2386.243619]  ? trace_hardirqs_on+0xbd/0x310
[ 2386.247962]  ? kasan_check_read+0x11/0x20
[ 2386.252129]  ? ___ratelimit+0x3b4/0x672
[ 2386.256118]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2386.261239]  ? trace_hardirqs_on+0x310/0x310
[ 2386.265664]  ? lock_downgrade+0x900/0x900
[ 2386.269847]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2386.274964]  ? ___ratelimit+0x3b9/0x672
[ 2386.278958]  ? idr_get_free+0xf70/0xf70
[ 2386.282942]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2386.287458]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2386.291983]  oom_kill_process.cold.27+0x10/0x903
[ 2386.296765]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2386.301291]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2386.305895]  ? oom_evaluate_task+0x540/0x540
[ 2386.310313]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.316317]  ? cgroup_procs_next+0x70/0x70
[ 2386.320565]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2386.325066]  ? oom_badness+0xaa0/0xaa0
[ 2386.328959]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2386.333739]  ? mem_cgroup_iter_break+0x30/0x30
[ 2386.338337]  ? mark_held_locks+0xc7/0x130
[ 2386.342526]  out_of_memory+0xa84/0x1430
[ 2386.346515]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2386.351103]  ? kasan_check_read+0x11/0x20
[ 2386.355261]  ? oom_killer_disable+0x3a0/0x3a0
[ 2386.359819]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2386.364686]  ? memory_oom_group_write+0x160/0x160
[ 2386.369531]  ? memcg_kmem_charge_memcg+0x7c/0x120
[ 2386.374385]  ? page_counter_try_charge+0x1c1/0x220
[ 2386.379321]  try_charge+0xda9/0x1700
[ 2386.383053]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2386.387743]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2386.392677]  ? kasan_check_read+0x11/0x20
[ 2386.396867]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2386.402148]  ? rcu_softirq_qs+0x20/0x20
[ 2386.406138]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2386.411708]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2386.416236]  ? lock_page_memcg+0x350/0x350
[ 2386.420506]  ? lock_acquire+0x1ed/0x520
[ 2386.424480]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2386.429848]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.435392]  ? check_preemption_disabled+0x48/0x280
[ 2386.440426]  memcg_kmem_charge_memcg+0x7c/0x120
[ 2386.445108]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 2386.449607]  ? debug_smp_processor_id+0x1c/0x20
[ 2386.454335]  memcg_kmem_charge+0x149/0x350
[ 2386.458598]  __alloc_pages_nodemask+0x75e/0xea0
[ 2386.463279]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[ 2386.468300]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.473874]  ? check_preemption_disabled+0x48/0x280
[ 2386.478897]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.484446]  ? zap_class+0x640/0x640
[ 2386.488186]  ? __lock_is_held+0xb5/0x140
[ 2386.492244]  ? lock_downgrade+0x900/0x900
[ 2386.496428]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2386.501992]  alloc_pages_current+0x173/0x350
[ 2386.506504]  pte_alloc_one+0x1b/0x1a0
[ 2386.510319]  __pte_alloc+0x2a/0x350
[ 2386.513957]  copy_page_range+0x2017/0x2ee0
[ 2386.518279]  ? __pmd_alloc+0x450/0x450
[ 2386.522220]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2386.527064]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2386.531962]  ? __save_stack_trace+0x8d/0xf0
[ 2386.536297]  ? rb_insert_color_cached+0x14b0/0x14b0
[ 2386.541320]  ? check_preemption_disabled+0x48/0x280
[ 2386.546344]  ? debug_smp_processor_id+0x1c/0x20
[ 2386.551054]  ? debug_smp_processor_id+0x1c/0x20
[ 2386.555745]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2386.560689]  ? lock_is_held_type+0x210/0x210
[ 2386.565158]  ? zap_class+0x640/0x640
[ 2386.568880]  ? lock_downgrade+0x900/0x900
[ 2386.573039]  ? zap_class+0x640/0x640
[ 2386.576762]  ? zap_class+0x640/0x640
[ 2386.580485]  ? find_held_lock+0x36/0x1c0
[ 2386.584587]  ? copy_process+0x4413/0x87a0
[ 2386.588748]  ? lock_downgrade+0x900/0x900
[ 2386.592902]  ? lock_release+0xa00/0xa00
[ 2386.596874]  ? perf_trace_sched_process_exec+0x860/0x860
[ 2386.602330]  ? dup_userfaultfd+0x6d8/0x890
[ 2386.606590]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2386.611630]  ? validate_mm_rb+0xaa/0xc0
[ 2386.615615]  ? __vma_link_rb+0x26c/0x370
[ 2386.619699]  copy_process+0x45e9/0x87a0
[ 2386.623715]  ? __cleanup_sighand+0x70/0x70
[ 2386.627966]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.633504]  ? check_preemption_disabled+0x48/0x280
[ 2386.638554]  ? zap_class+0x640/0x640
[ 2386.642284]  ? perf_trace_lock+0x14d/0x7a0
[ 2386.646537]  ? lock_is_held_type+0x210/0x210
[ 2386.650968]  ? __lock_is_held+0xb5/0x140
[ 2386.655104]  ? zap_class+0x640/0x640
[ 2386.658836]  ? __lock_acquire+0x62f/0x4c20
[ 2386.663106]  ? __account_cfs_rq_runtime+0x790/0x790
[ 2386.668149]  ? find_held_lock+0x36/0x1c0
[ 2386.672231]  ? do_wp_page+0x127c/0x2920
[ 2386.676216]  ? lock_downgrade+0x900/0x900
[ 2386.680370]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2386.684713]  ? kasan_check_read+0x11/0x20
[ 2386.688883]  ? do_raw_spin_unlock+0xa7/0x330
[ 2386.693309]  ? do_raw_spin_trylock+0x270/0x270
[ 2386.697951]  ? pgd_free+0x380/0x380
[ 2386.701606]  ? lock_is_held_type+0x210/0x210
[ 2386.706081]  ? _raw_spin_unlock+0x2c/0x50
[ 2386.710237]  ? do_wp_page+0x528/0x2920
[ 2386.714160]  ? finish_mkwrite_fault+0x650/0x650
[ 2386.718849]  ? __lock_acquire+0x62f/0x4c20
[ 2386.723104]  ? mark_held_locks+0x130/0x130
[ 2386.727357]  ? find_held_lock+0x36/0x1c0
[ 2386.731445]  ? __lock_acquire+0x62f/0x4c20
[ 2386.735693]  ? __lock_acquire+0x62f/0x4c20
[ 2386.739931]  ? perf_trace_lock+0x14d/0x7a0
[ 2386.744175]  ? debug_smp_processor_id+0x1c/0x20
[ 2386.748882]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2386.753831]  ? trace_hardirqs_on+0xbd/0x310
[ 2386.758183]  ? mark_held_locks+0x130/0x130
[ 2386.762423]  ? perf_trace_lock+0x14d/0x7a0
[ 2386.766669]  ? debug_smp_processor_id+0x1c/0x20
[ 2386.771346]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.776905]  ? check_preemption_disabled+0x48/0x280
[ 2386.781938]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.787486]  ? check_preemption_disabled+0x48/0x280
[ 2386.792507]  ? __lock_is_held+0xb5/0x140
[ 2386.796580]  ? print_usage_bug+0xc0/0xc0
[ 2386.800661]  ? print_usage_bug+0xc0/0xc0
[ 2386.804732]  ? find_held_lock+0x36/0x1c0
[ 2386.808829]  ? __lock_acquire+0x62f/0x4c20
[ 2386.813074]  ? zap_class+0x640/0x640
[ 2386.816848]  ? ktime_get_coarse_real_ts64+0x273/0x370
[ 2386.822083]  ? mark_held_locks+0x130/0x130
[ 2386.826331]  ? lock_acquire+0x1ed/0x520
[ 2386.830317]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2386.834962]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.840526]  ? check_preemption_disabled+0x48/0x280
[ 2386.845549]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.851094]  ? check_preemption_disabled+0x48/0x280
[ 2386.856133]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.861685]  ? debug_smp_processor_id+0x1c/0x20
[ 2386.866358]  ? perf_trace_lock+0x14d/0x7a0
[ 2386.870600]  ? debug_smp_processor_id+0x1c/0x20
[ 2386.875274]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2386.880239]  ? lock_is_held_type+0x210/0x210
[ 2386.884658]  ? perf_trace_lock+0x7a0/0x7a0
[ 2386.888902]  ? zap_class+0x640/0x640
[ 2386.892619]  ? zap_class+0x640/0x640
[ 2386.896340]  ? lock_is_held_type+0x210/0x210
[ 2386.900749]  ? perf_trace_lock+0x7a0/0x7a0
[ 2386.905001]  ? find_held_lock+0x36/0x1c0
[ 2386.909095]  _do_fork+0x1cb/0x11d0
[ 2386.912661]  ? fork_idle+0x1d0/0x1d0
[ 2386.916382]  ? __do_page_fault+0x620/0xe60
[ 2386.920638]  ? kasan_check_read+0x11/0x20
[ 2386.924789]  ? _copy_to_user+0xc8/0x110
[ 2386.928788]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2386.934344]  ? put_old_timespec32+0x110/0x280
[ 2386.938871]  ? get_old_timespec32+0x2a0/0x2a0
[ 2386.943376]  ? do_fast_syscall_32+0x150/0xfb2
[ 2386.947925]  ? do_fast_syscall_32+0x150/0xfb2
[ 2386.952436]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2386.957039]  ? trace_hardirqs_on+0xbd/0x310
[ 2386.961398]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.966939]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2386.971546]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2386.976652]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2386.982272]  __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2386.987302]  do_fast_syscall_32+0x34d/0xfb2
[ 2386.991632]  ? do_int80_syscall_32+0x890/0x890
[ 2386.996218]  ? entry_SYSENTER_compat+0x68/0x7f
[ 2387.000830]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2387.005889]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2387.010742]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2387.015592]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2387.020646]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2387.025690]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2387.030543]  entry_SYSENTER_compat+0x70/0x7f
[ 2387.034965] RIP: 0023:0xf7fb2a29
[ 2387.038376] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
16:57:47 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:47 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000000000001000000"], 0x14}}, 0x0)

16:57:47 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000040), 0x1fffff10)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c)

[ 2387.057295] RSP: 002b:000000000845fd70 EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[ 2387.065030] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000
[ 2387.072297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000895a968
[ 2387.079597] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2387.086867] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2387.094164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2387.121099] Task in /syz1 killed as a result of limit of /syz1
[ 2387.127112] memory: usage 307200kB, limit 307200kB, failcnt 116
[ 2387.158222] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2387.171493] input: syz1 as /devices/virtual/input/input1766
[ 2387.197891] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
16:57:47 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2387.218602] Memory cgroup stats for /syz1: cache:16KB rss:276008KB rss_huge:260096KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:276180KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 2387.240682] Memory cgroup out of memory: Kill process 25447 (syz-executor1) score 1106 or sacrifice child
[ 2387.266195] Killed process 25447 (syz-executor1) total-vm:70252kB, anon-rss:2196kB, file-rss:33512kB, shmem-rss:0kB
16:57:47 executing program 3:
r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000000040), 0x7f)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000180))
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)

16:57:47 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000180))
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0xa00)

[ 2387.335576] oom_reaper: reaped process 25447 (syz-executor1), now anon-rss:0kB, file-rss:32836kB, shmem-rss:0kB
16:57:47 executing program 3:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000040)={[{0x1000, 0x5, 0x1ff, 0x0, 0x5, 0x6, 0x5, 0x3, 0x6, 0x8001, 0x0, 0x8326c7d, 0x401}, {0x5, 0x401, 0xffffffffffffff61, 0x3, 0x200, 0x6f, 0x2, 0x1, 0x100000001, 0x2, 0x1, 0x13, 0x100000001}, {0xf4, 0x0, 0x9, 0x8000, 0x1f, 0x99, 0x400, 0x40, 0x81, 0x400, 0x10000, 0x800, 0x10001}], 0x4})
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x6000, 0x8001, 0x0, 0x1, 0x0, [{0x1f5c, 0x200, 0x8000, [], 0x4}, {0x100, 0x1000, 0x8001, [], 0x80000000}, {0x4d, 0x9, 0xfffffffffffffff7, [], 0x400}, {0x6, 0x20, 0x2, [], 0x9}, {0x80000000, 0x6, 0x3f5, [], 0x3}, {0x4, 0x0, 0x2, [], 0x6}, {0x7, 0x80000001, 0x9, [], 0x4}, {0xffffffff, 0x100000000, 0x8, [], 0x8}, {0x1, 0x40, 0x7, [], 0x81}, {0x8001, 0x9, 0x6, [], 0x8}, {0xb8d8, 0x3, 0x1, [], 0x8}, {0x7fffffff, 0x8, 0x2a, [], 0x3}, {0x8, 0x6, 0x2, [], 0x8001}, {0x1, 0x8, 0xe68b, [], 0xfffffffffffffffc}, {0x9, 0x7fffffff, 0x72, [], 0x8}, {0x7fff, 0xfff, 0x2, [], 0x3833d04a}, {0x707, 0x3, 0x9, [], 0xfdf}, {0x1, 0x2, 0x3, [], 0xffffffffffffff81}, {0xfffffffffffffffa, 0x7, 0xc2, [], 0xff}, {0xfffffffffffffd52, 0x5, 0xfffffffffffffff9, [], 0x2b0d594c}, {0x6, 0x2, 0x6, [], 0x401}, {0xff, 0xffff, 0x1, [], 0x4}, {0x2, 0x10000, 0x8, [], 0x4}, {0x4, 0x8, 0xfffffffffffffff7, [], 0x9}]}})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000240)=0x10)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x400000, 0x88)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000300)={0x6, 0x4, 0x1, 0x8000000})
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x6)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000380)=0x7)
ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000003c0)={0x7, 0x4188})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000400)={<r3=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000440)={<r4=>0x0, 0x0, 0x488})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000480)={r3, r4})
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x18}, 0x10)
fcntl$notify(r0, 0x402, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000540), &(0x7f0000000580)=0x30)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
signalfd4(r5, &(0x7f00000005c0)={0x6}, 0x8, 0x80000)
r6 = syz_open_dev$midi(&(0x7f0000000600)='/dev/midi#\x00', 0x7, 0x802)
r7 = request_key(&(0x7f0000000640)='.dead\x00', &(0x7f0000000680)={'syz', 0x0}, &(0x7f00000006c0)='\'securitymd5sum-\x00', 0x0)
keyctl$clear(0x7, r7)
ioctl$BLKRRPART(r5, 0x125f, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000700))
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000840)={0xa, 0x7, 0xec, 0x20}, 0xa)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1f, &(0x7f0000000880)=0x2, 0x4)
syz_open_dev$media(&(0x7f00000008c0)='/dev/media#\x00', 0x40, 0x0)

16:57:47 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:47 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$dspn(0x0, 0x7, 0x321440)
pipe(&(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0)
gettid()
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001200)={<r4=>0x0}, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
clone(0x7ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = getpid()
exit_group(0x0)
migrate_pages(r5, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f00000026c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r3)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
modify_ldt$write(0x1, &(0x7f0000001340)={0x0, 0x20001000}, 0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4, 0x9f6c}, &(0x7f0000000040)=0x8)
syz_open_dev$amidi(&(0x7f0000000d80)='/dev/amidi#\x00', 0x0, 0x22240)

16:57:47 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x4, 0x200000)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000380)={<r2=>0x0, 0x10000, 0x4, [0x0, 0x8001, 0x9, 0x3]}, &(0x7f00000003c0)=0x10)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000440)={r2, 0xfffffffffffffffd, 0x9, [0x1ff, 0x1, 0x796, 0x4, 0x40, 0x7, 0x1, 0xee, 0x7]}, 0x1a)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000280)={0x0, @reserved})
r4 = getuid()
fsetxattr$security_capability(r0, &(0x7f0000000480)='security.capability\x00', &(0x7f00000004c0)=@v3={0x3000000, [{0x401, 0x4}, {0xe3e0, 0x74}], r4}, 0x18, 0x3)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
sendfile(r3, r1, &(0x7f0000000500), 0x3)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x9, 0x1f, 0x8, 0x2}, 'syz1\x00', 0x1})
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
flistxattr(r0, &(0x7f00000000c0)=""/128, 0x80)

16:57:47 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x0, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:47 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000fffffff00000000000"], 0x14}}, 0x0)

16:57:47 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:47 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0xa00)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x22202, 0x0)

16:57:48 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:48 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2387.758640] input: syz1 as /devices/virtual/input/input1768
16:57:48 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x0, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:48 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x0, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:48 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)

16:57:48 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2388.094136] input: syz1 as /devices/virtual/input/input1770
16:57:48 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x0, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:48 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x0, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2388.179942] input: syz1 as /devices/virtual/input/input1771
16:57:48 executing program 0:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x80)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x14)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r1, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x304, 0xa00)

16:57:48 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:48 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000000080000000000"], 0x14}}, 0x0)

16:57:48 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2c)
getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8)

16:57:48 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:48 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x0, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:48 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002bc0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000002cc0)=0xe8)
sendmmsg(r1, &(0x7f0000006600)=[{{&(0x7f0000002d00)=@ll={0x11, 0xf5, r2, 0x1, 0x4}, 0x80, &(0x7f0000004000)=[{&(0x7f0000002d80)="f97e5e96c81e6c15a6a200469cbe7bb431cd9b64bdbe03995da616542a3eccae744c89c3f872a05cff4e24e01ec334bfb199814131ed408ea053b0e09ad8be3bdfbb0c56957a66c8b752ef0ea65046280228928abf2d50d912893df4aa6a16cc5476557cc012a01075414527118c8ff971a1576c8c8e719cdea3c3a478c7cf5b0ee9f87b5ead858b42", 0x89}, {&(0x7f0000002e40)="637a892589a99b04e381419c0163c0a418d12cfe31b8438df9e68c61a9ddd00b1efcdfb5dd0ecbe275ee1672695454f77c2cf1cbb4e3b4ffff9a02de1204b30059a40ed8270bcc47254e49bdfd3599a289c7bfc575b795c1fd6abff1d905d5450e4779d067f0b85c66efe03815f7c35f32b461b075c4a8fd3c", 0x79}, {&(0x7f0000002ec0)="68ddf647a46b27c9bb65dead6a6140806411f8ea91ef9aa183d0c3359130995d083bb5017682506ca4a4309b2ec4d9ba6d2a4e3fccb7ec21967c8f2674ec3745d599b47ec572525909d6f3a04a7548621b4406619cdb7463b111cbc05c188275903358b358ee3eb5178686", 0x6b}, {&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="0964de7811e9bc87932e964026495ce29444b2b80766dbb30a4a3ef5c3aa07eb428fd1a22486ee92742b56820bb0f65807d4897410fa6efa8b309ab33771d46ac888b49787edb36e531b87ba6058d10e8794ff6004450731d92c30a45e377bc5499ad5bae76f9da489061afc8978b3191c8aa021c58627866f4da311156962f06b1b6132afe94726f50940fb543798c05f2ceaed8db4b2b4", 0x98}], 0x5, &(0x7f0000004040)=[{0x58, 0x109, 0x5, "0ff46e7bb9ebd9531a17e4b58e7bff8d9253ac0b7a8ae5236f0f5d9a572d6bfd9caa7c524adba00385074fe5430f323f47d9db3003ec2f4121e5bae4284bb9971e0ae6bcb40c1b846df916"}, {0x100c, 0x10f, 0x7fff, "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"}, {0x54, 0x118, 0x26a, "85d5bcdacabf19938ab688ce1f8deb93c63a1b8fd35e3594d93aeba9659f1eff3669af4b861b340567b6ba078bdac0cf98c15e0146b9daec3af1c66a7b4eea0f4510a1615e"}, {0x38, 0x107, 0xfffffffffffffffd, "c1374b15d6c055bcd6f552cf363d5dfaae3b00f39fbd9f66341d2f03eb58c78253f17cb69680260d852857"}], 0xffffffffffffff25, 0x20000004}, 0x2}, {{&(0x7f0000005140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x1, 0x0, 0x3}}, 0x80, &(0x7f0000005280)=[{&(0x7f00000051c0)="1e62c90315cbb7160058a0fa1938f3e44caa124a7a6eadc794044d7303664e83cbcdf654f5b1286d754f2fdf99f2ad1c5ba773e8e7d3f40d6cb5cdc5f8c6467a109eb8c0084ff5950cf902e45674c03885f404f2aa55c0883083ca09044513becf67414b4bf1716e3a62dde8a04bc29c585bd156bc69c1786ee0c4fd7d090f1a413b0eec0066ff0879219313d03ca258b42fc61420bfc72207feaf2db539d8ad85384ac3ab9adf330c5235be8ede5756c0202801fcf8e6fcd03bc6", 0xbb}], 0x1, &(0x7f00000052c0)=[{0x10, 0x11c, 0x3, "8cb6bb"}, {0x2c, 0x103, 0x6, "b5d27a6502a1cd72e3b1693c20c2b95c1aa77913d266ec60ac6ef3fe74"}], 0x3c, 0x8000}, 0x520}, {{&(0x7f0000005300)=@sco={0x1f, {0x9, 0x8, 0x20, 0x2, 0x80000001, 0x2}}, 0x80, &(0x7f0000005500)=[{&(0x7f0000005380)="8a7a6415ef85d7f9c62d4e188089381dd53c9caf79ed70492980668035a967", 0x1f}, {&(0x7f00000053c0)="aa6f2e277ceb05bae1f0eb370009b286bafa567b46e81049b58e4a7e8f8c47a8d4f34f045a93639a2abe8c5db894774edea31bfaf47c91d51d39c5a2b5dff130134de9098f533bc83b9682c9aa", 0x4d}, {&(0x7f0000005440)="f3f5dac424efa20f848c8d3c960a260ca8ddbb8af775526b373bc118e2388672f9466ec591ed14ec2ffa0cd1669b17e6333aeb11b296dffd9c40f54f756bcbcc86f7ab04d37095a65a0e9c30d590b62cfae31cc660f356bd0b7eeea06254e41d52f38fea93bca837a1c1c334b24769214db60b53860c631eaf3f53eca1e29843944163dd6c7dbca6", 0x88}], 0x3, &(0x7f0000005540)=ANY=[@ANYBLOB="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"], 0x109c, 0x80}, 0x885a}], 0x3, 0xa00)

[ 2388.524288] input: syz1 as /devices/virtual/input/input1772
16:57:48 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x0, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:48 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x0, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2388.624959] input: syz1 as /devices/virtual/input/input1773
16:57:49 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:49 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0xe, 0x0, 0x0, 0xffffffffffffffff, 0x12}, 0x20)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000780)}, 0x10)
unshare(0x40000000)
r3 = dup(r1)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000200))
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000980), &(0x7f00000009c0)=0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="42a584e923f33e419b5571a8474f48e959ae78135241e6b2799cb0e889b2eb2667b33c2c5857d320fcf34d883e5724deb2d8953396b19016816fa06ac8ad549f7b4a4ce2a2a2ab85700835e4a8c92a941aa79e2c7e00d082cee806258d02ee8133033d3767a151322cf489c6"], 0x6c}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4), 0x1c)
listen(0xffffffffffffffff, 0x20000)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000300)=0x2)
socket$inet_dccp(0x2, 0x6, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000001080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f9b), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
finit_module(r0, &(0x7f0000000100)='/dev/sequencer\x00', 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="e37263428af43a5e9f126f6c16d47fb7429694eefa499f29c56f7c5efcb825e98978f8ffaaf60a547f40df76f6539a6346aa522d118d61c13dea36377d9b4a9207a8483e188b25c06adac0d8d5c947e7af08f80e47029f31c2b5246f998d77df2b5c442e2b75b9a4ec52ecc275fd129e019c0ed05903c7583385ce0538bbd8648a62cd7a42dd49b7be60364fe0070e1b03133cabe40450404f7373f2b1a3fdbe42c55d44f772da", 0xa7, 0x48010, &(0x7f000031e000)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0x15}, 0xffffffffffffffff}, 0x1c)
ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e21, @local}})
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40000, 0x0)
chmod(&(0x7f0000000080)='./file0\x00', 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={<r6=>0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40c00)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f0000455000)='S', 0x1, 0x0, &(0x7f00009aafe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x8, 0xa1, {"d0fda24b6d61078df1a7a8bd55d8ddc6"}, 0x18, 0xd2d6e28, 0x5}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}}, 0x118)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000140)={<r7=>0x0, 0x0, 0x2f, 0x7, 0x1, 0x1ff}, &(0x7f00000001c0)=0x14)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000002c0)={r7}, &(0x7f00000005c0)=0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000040), 0x8)

16:57:49 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:49 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x0, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:49 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x121200, 0x0)
ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000180)=""/232)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0xa00)

[ 2389.059734] IPVS: ftp: loaded support on port[0] = 21
16:57:49 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000ffffff880000000000"], 0x14}}, 0x0)

16:57:49 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x9, 0xfdb, 0x2, 0x401}, 'syz0\x00', 0x33})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:57:49 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:49 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x0, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:49 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0xa00)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)=0x2)

[ 2389.374456] input: syz1 as /devices/virtual/input/input1774
16:57:49 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2389.499426] input: syz1 as /devices/virtual/input/input1775
16:57:49 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x0, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:49 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000000020000000000"], 0x14}}, 0x0)

[ 2389.887924] IPVS: ftp: loaded support on port[0] = 21
16:57:50 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x9, 0xfdb, 0x2, 0x401}, 'syz0\x00', 0x33})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:57:50 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:50 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{0x0, 0x8000000000000000}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe8)
lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(r1, r2, r3)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {0xfffffffffffffffc}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}, 0x45c)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
write$sndseq(r4, &(0x7f00000000c0)=[{0x1f, 0x51c5, 0x2, 0x9, @time, {0x0, 0xe8}, {0xaf2, 0x2}, @time=@time={r5, r6+10000000}}, {0x101, 0x3ff, 0x81, 0x10001, @tick=0x845, {0x707cd552, 0x5}, {0x400, 0x8}, @addr}, {0xffffffffffffffff, 0x7, 0x40, 0x2, @tick=0x7, {0x0, 0xfff}, {0x80000001, 0x11}, @raw8={"d56ff9700c071ec02093370f"}}], 0x54)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={<r7=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7, @loopback, 0x3ff}]}, &(0x7f00000002c0)=0xc)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000300)={r7, 0x2, 0x80000000}, &(0x7f0000000340)=0x8)

16:57:50 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:50 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x5, 0x20000)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006580ff0000000008003950323030ed2e4c"], 0x15)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x400000000000027, 0xa00)

16:57:50 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff0000000ec000000000000000"], 0x14}}, 0x0)

16:57:50 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2390.073853] input: syz1 as /devices/virtual/input/input1776
16:57:50 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2390.168384] input: syz1 as /devices/virtual/input/input1777
16:57:50 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:50 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:50 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x7ff, 0x20000)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0185648, &(0x7f0000000300)={0xa10000, 0x7, 0x3, [], &(0x7f00000002c0)={0x990afe, 0x1000, [], @value=0x6}})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000003c0)=0x4, 0x4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x80000)
fstatfs(r2, &(0x7f0000000380)=""/29)
connect$l2tp(r1, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x2, 0x0, 0x2, 0x1}}, 0x26)
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/183, &(0x7f0000000040)=0xb7)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:57:50 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x3ce)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x8000, 0x0)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000180)={0xfffffffffffffffd, 0x100, "e3d9db290c58fb85a3840f9b23357259a568c65bf08cabd5857708f1981115fc", 0x3, 0x1, 0x0, 0x4, 0x2})
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x80000000, 0x0)
connect$inet6(r2, 0x0, 0xffffffffffffff65)
sendmmsg(r2, &(0x7f00000002c0), 0x400000000000027, 0xa00)

16:57:50 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2390.446233] syz-executor1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0
[ 2390.484998] input: syz1 as /devices/virtual/input/input1779
[ 2390.490011] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2390.506520] CPU: 1 PID: 1614 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2390.513846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2390.523215] Call Trace:
[ 2390.525824]  dump_stack+0x244/0x39d
[ 2390.529463]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2390.534674]  ? mark_held_locks+0x130/0x130
[ 2390.538913]  ? mark_held_locks+0x130/0x130
[ 2390.538934]  dump_header+0x27b/0xf72
[ 2390.538963]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
16:57:50 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2390.552447]  ? check_preemption_disabled+0x48/0x280
[ 2390.557470]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2390.563031]  ? pagefault_out_of_memory+0x197/0x197
[ 2390.567981]  ? debug_smp_processor_id+0x1c/0x20
[ 2390.572655]  ? perf_trace_lock+0x14d/0x7a0
[ 2390.576908]  ? debug_smp_processor_id+0x1c/0x20
[ 2390.581600]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2390.586539]  ? lock_is_held_type+0x210/0x210
[ 2390.590956]  ? perf_trace_lock+0x7a0/0x7a0
[ 2390.595247]  ? debug_smp_processor_id+0x1c/0x20
[ 2390.599938]  ? perf_trace_lock+0x14d/0x7a0
[ 2390.604183]  ? zap_class+0x640/0x640
[ 2390.607907]  ? print_usage_bug+0xc0/0xc0
[ 2390.607922]  ? lock_is_held_type+0x210/0x210
[ 2390.607948]  ? find_held_lock+0x36/0x1c0
[ 2390.607969]  ? mark_held_locks+0xc7/0x130
[ 2390.616412]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2390.629705]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2390.634843]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2390.639439]  ? trace_hardirqs_on+0xbd/0x310
[ 2390.643848]  ? kasan_check_read+0x11/0x20
[ 2390.648006]  ? ___ratelimit+0x3b4/0x672
[ 2390.652052]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2390.657169]  ? trace_hardirqs_on+0x310/0x310
[ 2390.661585]  ? lock_downgrade+0x900/0x900
[ 2390.665745]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2390.670864]  ? ___ratelimit+0x3b9/0x672
[ 2390.674846]  ? idr_get_free+0xf70/0xf70
[ 2390.678832]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2390.683336]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2390.687886]  oom_kill_process.cold.27+0x10/0x903
[ 2390.692652]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2390.697183]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2390.701796]  ? oom_evaluate_task+0x540/0x540
[ 2390.706221]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2390.711770]  ? cgroup_procs_next+0x70/0x70
[ 2390.716059]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2390.720567]  ? oom_badness+0xaa0/0xaa0
[ 2390.724474]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2390.729256]  ? mem_cgroup_iter_break+0x30/0x30
[ 2390.733867]  ? mark_held_locks+0xc7/0x130
[ 2390.738057]  out_of_memory+0xa84/0x1430
[ 2390.742045]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2390.746653]  ? kasan_check_read+0x11/0x20
[ 2390.750821]  ? oom_killer_disable+0x3a0/0x3a0
16:57:51 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2390.755367]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2390.760260]  ? memory_oom_group_write+0x160/0x160
[ 2390.765127]  ? memcg_kmem_charge_memcg+0x7c/0x120
[ 2390.769989]  ? page_counter_try_charge+0x1c1/0x220
[ 2390.774930]  try_charge+0xda9/0x1700
[ 2390.778674]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2390.783358]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2390.788292]  ? kasan_check_read+0x11/0x20
[ 2390.792445]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2390.792476]  ? rcu_softirq_qs+0x20/0x20
[ 2390.792504]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2390.792522]  ? lock_page_memcg+0x350/0x350
[ 2390.792544]  ? lock_acquire+0x1ed/0x520
[ 2390.815563]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2390.820938]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2390.826492]  ? check_preemption_disabled+0x48/0x280
[ 2390.831531]  memcg_kmem_charge_memcg+0x7c/0x120
[ 2390.836205]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 2390.840721]  ? debug_smp_processor_id+0x1c/0x20
[ 2390.845400]  memcg_kmem_charge+0x149/0x350
[ 2390.849636]  __alloc_pages_nodemask+0x75e/0xea0
[ 2390.854335]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[ 2390.859358]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2390.864898]  ? check_preemption_disabled+0x48/0x280
[ 2390.869924]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2390.875471]  ? zap_class+0x640/0x640
[ 2390.879210]  ? __lock_is_held+0xb5/0x140
[ 2390.883278]  ? lock_downgrade+0x900/0x900
[ 2390.887437]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2390.893015]  alloc_pages_current+0x173/0x350
[ 2390.897437]  pte_alloc_one+0x1b/0x1a0
[ 2390.901266]  __pte_alloc+0x2a/0x350
16:57:51 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2390.904939]  copy_page_range+0x2017/0x2ee0
[ 2390.909231]  ? __pmd_alloc+0x450/0x450
[ 2390.913159]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2390.918032]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2390.922920]  ? __save_stack_trace+0x8d/0xf0
[ 2390.927254]  ? rb_insert_color_cached+0x14b0/0x14b0
[ 2390.932286]  ? check_preemption_disabled+0x48/0x280
[ 2390.932307]  ? debug_smp_processor_id+0x1c/0x20
[ 2390.932331]  ? debug_smp_processor_id+0x1c/0x20
[ 2390.932345]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2390.932363]  ? lock_is_held_type+0x210/0x210
16:57:51 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x0, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2390.932386]  ? zap_class+0x640/0x640
[ 2390.959727]  ? lock_downgrade+0x900/0x900
[ 2390.963910]  ? zap_class+0x640/0x640
[ 2390.967640]  ? zap_class+0x640/0x640
[ 2390.971376]  ? find_held_lock+0x36/0x1c0
[ 2390.975455]  ? copy_process+0x4413/0x87a0
[ 2390.979611]  ? lock_downgrade+0x900/0x900
[ 2390.983773]  ? lock_release+0xa00/0xa00
[ 2390.987812]  ? perf_trace_sched_process_exec+0x860/0x860
[ 2390.993270]  ? dup_userfaultfd+0x6d8/0x890
[ 2390.997543]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2391.002595]  ? vma_compute_subtree_gap+0x160/0x240
[ 2391.007548]  ? validate_mm_rb+0xaa/0xc0
[ 2391.011537]  ? __vma_link_rb+0x26c/0x370
[ 2391.015608]  copy_process+0x45e9/0x87a0
[ 2391.019643]  ? __cleanup_sighand+0x70/0x70
[ 2391.023912]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2391.029455]  ? check_preemption_disabled+0x48/0x280
[ 2391.034475]  ? find_held_lock+0x36/0x1c0
[ 2391.038547]  ? perf_trace_lock+0x14d/0x7a0
[ 2391.042787]  ? try_to_wake_up+0x11c/0x1490
[ 2391.047069]  ? lock_is_held_type+0x210/0x210
[ 2391.051486]  ? trace_hardirqs_off+0xb8/0x310
[ 2391.055895]  ? kasan_check_read+0x11/0x20
[ 2391.060069]  ? zap_class+0x640/0x640
[ 2391.063826]  ? lock_pin_lock+0x350/0x350
[ 2391.067900]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2391.073457]  ? find_held_lock+0x36/0x1c0
[ 2391.077547]  ? do_wp_page+0x127c/0x2920
[ 2391.081545]  ? lock_downgrade+0x900/0x900
[ 2391.085699]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2391.090058]  ? perf_trace_lock+0x7a0/0x7a0
[ 2391.094301]  ? kasan_check_read+0x11/0x20
[ 2391.094337]  ? do_raw_spin_unlock+0xa7/0x330
[ 2391.094354]  ? do_raw_spin_trylock+0x270/0x270
[ 2391.102900]  ? pgd_free+0x380/0x380
[ 2391.102925]  ? _raw_spin_unlock+0x2c/0x50
[ 2391.102938]  ? do_wp_page+0x528/0x2920
[ 2391.102950]  ? find_held_lock+0x36/0x1c0
[ 2391.102970]  ? finish_mkwrite_fault+0x650/0x650
[ 2391.102983]  ? __lock_acquire+0x62f/0x4c20
[ 2391.102996]  ? mark_held_locks+0x130/0x130
[ 2391.103008]  ? lock_downgrade+0x900/0x900
[ 2391.103052]  ? __lock_acquire+0x62f/0x4c20
[ 2391.144842]  ? __lock_acquire+0x62f/0x4c20
[ 2391.149096]  ? perf_trace_lock+0x14d/0x7a0
[ 2391.153341]  ? debug_smp_processor_id+0x1c/0x20
[ 2391.158022]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2391.162969]  ? mark_held_locks+0x130/0x130
[ 2391.162984]  ? perf_trace_lock+0x14d/0x7a0
[ 2391.163001]  ? debug_smp_processor_id+0x1c/0x20
[ 2391.163033]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2391.163063]  ? check_preemption_disabled+0x48/0x280
[ 2391.163086]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2391.180023] input: syz1 as /devices/virtual/input/input1780
[ 2391.181725]  ? check_preemption_disabled+0x48/0x280
[ 2391.181739]  ? __lock_is_held+0xb5/0x140
[ 2391.181759]  ? print_usage_bug+0xc0/0xc0
[ 2391.181810]  ? print_usage_bug+0xc0/0xc0
[ 2391.181837]  ? find_held_lock+0x36/0x1c0
[ 2391.181859]  ? __lock_acquire+0x62f/0x4c20
[ 2391.192436]  ? zap_class+0x640/0x640
[ 2391.223577]  ? ktime_get_coarse_real_ts64+0x273/0x370
[ 2391.232490]  ? mark_held_locks+0x130/0x130
[ 2391.232508]  ? lock_acquire+0x1ed/0x520
[ 2391.232522]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2391.232544]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2391.232560]  ? check_preemption_disabled+0x48/0x280
[ 2391.232582]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2391.261500]  ? check_preemption_disabled+0x48/0x280
[ 2391.266521]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2391.272088]  ? debug_smp_processor_id+0x1c/0x20
[ 2391.276790]  ? perf_trace_lock+0x14d/0x7a0
[ 2391.281074]  ? debug_smp_processor_id+0x1c/0x20
[ 2391.285773]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2391.290777]  ? lock_is_held_type+0x210/0x210
[ 2391.295209]  ? perf_trace_lock+0x7a0/0x7a0
[ 2391.299450]  ? zap_class+0x640/0x640
[ 2391.303170]  ? zap_class+0x640/0x640
[ 2391.306895]  ? lock_is_held_type+0x210/0x210
[ 2391.311346]  ? perf_trace_lock+0x7a0/0x7a0
[ 2391.315604]  ? find_held_lock+0x36/0x1c0
[ 2391.319689]  _do_fork+0x1cb/0x11d0
[ 2391.323261]  ? fork_idle+0x1d0/0x1d0
[ 2391.327007]  ? __do_page_fault+0x620/0xe60
[ 2391.331272]  ? kasan_check_read+0x11/0x20
[ 2391.335428]  ? _copy_to_user+0xc8/0x110
[ 2391.339411]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2391.344965]  ? put_old_timespec32+0x110/0x280
[ 2391.349476]  ? get_old_timespec32+0x2a0/0x2a0
[ 2391.353978]  ? do_fast_syscall_32+0x150/0xfb2
[ 2391.358508]  ? do_fast_syscall_32+0x150/0xfb2
[ 2391.363010]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2391.367621]  ? trace_hardirqs_on+0xbd/0x310
[ 2391.371945]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2391.377495]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2391.382089]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2391.387200]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2391.392758]  __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2391.397787]  do_fast_syscall_32+0x34d/0xfb2
[ 2391.402147]  ? do_int80_syscall_32+0x890/0x890
[ 2391.406743]  ? entry_SYSENTER_compat+0x68/0x7f
[ 2391.411364]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2391.416383]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2391.421231]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2391.426084]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2391.431125]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2391.436164]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2391.441021]  entry_SYSENTER_compat+0x70/0x7f
[ 2391.445894] RIP: 0023:0xf7fb2a29
[ 2391.449269] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 2391.468169] RSP: 002b:000000000845fd70 EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[ 2391.475895] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000
[ 2391.483177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000895a968
[ 2391.490442] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2391.497719] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
16:57:51 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000100000000000000000"], 0x14}}, 0x0)

16:57:51 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:51 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x0, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2391.504997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2391.586009] Task in /syz1 killed as a result of limit of /syz1
[ 2391.592362] memory: usage 307200kB, limit 307200kB, failcnt 164
[ 2391.598571] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2391.606103] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2391.613264] Memory cgroup stats for /syz1: cache:16KB rss:274860KB rss_huge:258048KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:275016KB inactive_file:0KB active_file:0KB unevictable:0KB
16:57:51 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2391.636420] Memory cgroup out of memory: Kill process 7648 (syz-executor1) score 1106 or sacrifice child
[ 2391.677017] Killed process 7648 (syz-executor1) total-vm:70516kB, anon-rss:2224kB, file-rss:33476kB, shmem-rss:0kB
16:57:52 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:52 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x8000, 0xa0000)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x510, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000844)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(r3, &(0x7f0000007c00)=[{{&(0x7f0000000380)=@ethernet={0x307, @dev={[], 0x18}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)="2180700fa8fe455bf91def11e42532d990461d217a31ce05771690e1ab68df69c13e31044c", 0x25}, {&(0x7f0000000440)="da710a828087052579325b4ab5193ae6aa8160eeb399ede950d907055dde04ab6a2e42796083c5db5ddc484d2eade1f688aa791bb5223fcf6e418cba190e08e60715a8b70f23c3ebc57d3eb2be4f5d9afcc1eb0bc71c1cc0b2f11fca1dc4057558353b726007c34303d9f2bfb6c6c3fbd71a180abe49aab147efac19bcbd44c9f6b7fb7741c1f86454258f25f242064ed887ae711c3962e01e915e5d575db7654deef6d2ac62fb2fb1de7181bdf105adc950caecb8a9e5df9024c9a8793351657db014015ef70ee7dd61f497f8c971cf192b6dac11b41418", 0xd8}, {&(0x7f0000000540)="a824e9da1d9a6ceb676330d28f5ca0589aec127b0dfc30e37a8c22a1c81a863ffaadf61d0a1ed9be97169f6a283a4fc079148b374e48f2370f77aacac7366b1d7e5d2d316f3c7ca7fe0fc68476c5dd7decd93c56325920fdf607b34e4dca3105d59c10305cfc7050ee12953f83b7d41c2ec32c43bbc3c81e6d13f863451afe60188de85bb69682646f1b623f51320b96879178b591212dbbb37a529fd5580088c662513da6f0fe214fae2cde2af9cdb64ff8d2a0cd2054cbd56b65cab3d0cc24b7657b54a3e8d5d525e75f283d", 0xcd}, {&(0x7f0000000640)="cdb2e21a64f285f1e0d08734f359aa0f15cbdb043eae51caaef5c79c48101bd42d0182d70ebf6305b6993cf42c004e4d335bf172912292329da05d762c5d4f6756242ab866434b4c2079f61426bd7c7323856c61905409cde722202897a47772c88fc409a17ef1ece3a81608c49d56cd6da28ca4335968abd4e7cd820f4cf88fdb9ebca085d537a591e611eba5f636ed26eb1e984f4f4831e21b3a8cdf94e85280076b16a8728c51fb57f1ff01c2e9d869147d051d2cce4a9ef4181ddc7875491631c8ce0537f7701709084c902a3a11f46695241fc064a71b363f2efcb1a14d", 0xe0}], 0x4, &(0x7f0000000780)=[{0x78, 0x113, 0x9, "8687d05d01b8a8e3c80bdaf82e5190300e7ee306c2155164d3e09c410420db2efe85fe91b85873992df752e794ca37cc4c6ac5dc8fd7dc59c75c88f89f79e438bc3590ea454bcdc6badb467791a148518f73407562404a19d0044ed6023d94bebcadbfb3dc900555391ef8"}, {0x28, 0x0, 0xff, "2be01ff586900700b8bb6d1fecfbe029865193f34adab6fee626"}, {0x100c, 0x1, 0x1000, "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"}, {0xac, 0x0, 0xc7, "80c0ad54a257ea4cf83eae1d9c1868922368da3862ab7181b280ad90843c600bd3996e88d96382c50888ee0e4c39aec2391ceb03f3c8c0fb3a11aea601e2063b6894db66f1aaf11af8d9f018287ad4ebf49432b48d5c6e19ac72c8150f42f9b25f0fa8613f8f33c4c97964fc3f4cd23dc7364d37ee88305a1df35b43e17ef0ef2cd2ea8bc0526558b61cf105175129062cad7c33ebef7437df21ac3e7d5a"}, {0xec, 0x100, 0x7, "98a7f997b7e93b04398d981d7fe58568b34f180b6f3582bd3b08585cfe75701abfe4fbb7ee6fcd99610d88a11b98e625f9daa959f99255d754bb2a0d8911b1a29442858192851d8575722b8faddb9012b2cca7d6351d6d8d93b5aafcd30e17e4b749819cf65d156dc247b42d4c5980c00eb145bbd9a4d4d07aa44547773ca9079cb9c80cea9efd5314f204477a87c1444feba6157c4a13ed35badc9cf13451c10c6da4a912ca2e1d28dde529baa77df33571326c60837465689725421d3ae4e72ad5210b6cdbe1be113d57b9a23e5fa77ca8d0d56997eb375bf6d1d67f12"}, {0x14, 0x11f, 0x9, "43a5925d7e"}], 0x1258, 0x4}}, {{&(0x7f0000001a00)=@sco={0x1f, {0x7, 0x2, 0x482e, 0x6, 0xc6c, 0x6e}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a80)="90ea9b83928f83b98c82b5d863197d183dc797c9f538674cad0cf8c76ed57193792c8615776f14fec21370cab9fc7c69bfdc00a56bc3e3313e8b6ec9246e8b40a3734d7456a2f9f18b78279bd8331248ef7e10eca686ecbdb8e3ad88a8f657ccd9647f49af324bda256d8df5dca4", 0x6e}, {&(0x7f0000001b00)="1911f60ea8e7235226e295501dd2a8cd86e95c1a46d3af94e1a4f301180e3c20cc9de98b3acb1292caeb741f4f0878ec0689d1715da5c8ab6699aa83b1", 0x3d}], 0x2, &(0x7f0000001b80)=[{0x100c, 0x19d, 0x9, "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"}, {0x18, 0x0, 0x2, "b131df64eb4adafd65d5cb"}, {0x94, 0x111, 0x101, "3217f0174d5a15326e8b70d1b8aed08dee0de95a1ae09e42644d01db0bb5387ce46eab054e622e5316c51fbcba713af44fcf5032d1152226771b932fe644ea2cfd0700c505f5b1cb849bb0db3e38ff8d045f98bb4695ca813d194790d8effe6e147da9c60b44a4d4a5318731542c2eb4c546085440f4b16fee818e908157380b1e907670f0851c98"}], 0x10b8, 0x20000000}}, {{&(0x7f0000002c40)=@nl=@kern={0x10, 0x0, 0x0, 0x9002}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002cc0)="39ff8632d2af3b846b26623384394a4e37427b5676392eaa102da87cd917a5edc6b3bfb2fd99b55fd15d0d19406bf0c23359a0261d59b1bdd81563f11d766fce02d5ffaa1ce62514df914526782bf4df755f913f9ed37092f83168ed31ca8b05e3b804a5b9fc30faac2783c60c447b0fcec8b15019647dc4410ed5fff22590a13d6cc23496a22e756eb4414a8e2f0390cdceb8022ce4d3950dca17081dc395371f01a95741bd1fffb9f3be80f88812c67a7eea07a1470499e230011f02a62bccf4349ce84877439b6e40b2054c2c3ab5d24baffa10c9dbe0f7bb0284b8bd8c1b102247b1173820", 0xe7}, {&(0x7f0000002dc0)}, {&(0x7f0000002e00)="c6684454087afaba2ef8fd79b4e9f40dd01717bac61533b109da76f29d796321864dccbeac829fc492669aa7712ffcbeaf3ea2245a9f5a8b439cd7882e80a04d04fdbdce6c20267334d3fe30d5b38c98f6abf96685c6caf63b2209643d252fe88b3621", 0x63}, {&(0x7f0000002e80)="bbca2977ae55339fb40caeac051bd4f1c1e2bb36cf42d8cb5abc5c3e9fef50b7e92d82d9943bee7386117b2ab77a202739403c5022e09c13e47da74112829209edefd35b479a84daa7", 0x49}, {&(0x7f0000002f00)="91765b5cd93e80d1791b197b49e781afdf111d677f23617ff48113bf6c8654b79af8916e0155fc5c37076ea0d2d7b076b9bb021df70229168600bb418d110265b79940f7b54972f72ff7bddabf3e29f8816ae0737a822c5a47463c938e71a7b194425b0840", 0x65}, {&(0x7f0000002f80)="c3811465c43245cfa51b195fd17a47d35bb40ce5093c1085bbe03c5549aa08363b3fd9f96051ebdef2676b63f49b7ff40cc50abc1122a43d08db5ee29117f9506cec60407e3ffd5a0e25cff7967b4cd7fb84159acd7ad872702076721c6b05ade2d4b76624ed56fde348972b68fb106646fceb55a571624a0452af02b583e3e2aaf24808b3f2023d5d101b464493f1fa2937448d315aec7543e8813c25d415e73ad8e0ab53d31410daf1079afaacaf13caab8306ad137286929816c2207c535b2c1c04d9cbb002648662aae28866d2c09e45dd6d93f86852b4267d36b399319e", 0xe0}, {&(0x7f0000003080)="06d0bc15933285524324991c0805fa0ec6f782d36117831437b438a12c143a05bd8c17836e2c132c63aa870549c2f38333686a5e12c4d9b702a849bee2419b6612", 0x41}, {&(0x7f0000003100)="c657079037661386e82ef6425db11ddd06ef14af1c7a2dbb4e150c25951fd78ae9911155589dbf0ff7c921d5544d4e561415d53b03a99f56c3ca99fe78bb54c8a5311ca31636aed19f555303b325d32bf9223de7f1b6ab98e7ee757d8ca2aa6f1f187073d576e957e11280a5d5a0aa9efba3e3d6e63d", 0x76}, {&(0x7f0000003180)="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", 0xfb}], 0x9, &(0x7f0000003300)=[{0xe8, 0x119, 0xc992, "6d628957b08074012aee4e2f012edcf54ea90cfc2e98f4d49c810eff6362c2da4ac48d1c2a7b41f71c502454566425e60483d38600dadf23437dee8438cafaedce7714bfe02ce6c88a1cd7af7d62578355403b6e305118b469bc3b11fc981128ddd931b83542a825236c20ffc44b89f80b0fae71e4b1b200c5224644558110a009958b6782822e9e274e736b953d4bfcaa48366fe3802404aeb038c8cdb3b3db23df9de210b0eeb1c8846f3d2de185083c6240d39c3d990f2ccb8a35b5325850c41d5e9662c6fc12ef04e6a5e2d5e731dd553cd2b54ddee9b13e"}], 0xe8}, 0x7}, {{&(0x7f0000003400)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f0000003480)}}, {{&(0x7f00000034c0)=@ethernet={0x7, @dev={[], 0x17}}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003540)="6bb31a825d76830db84c224a7eecbd7eb7f3601dd2f32cfc7aac51819ca8f96fad0721a14ab490f65c750b9ff8cd9ac7bf446cc7d7fb5ceedab5998180b4c3ed1be9271ba1e02b4e2c0f1e47895a3e46ade5150095948ba48bffab9ec9ac6b6a3c553cab7bdaa593bcb00ed7b986e82dbe32", 0x72}, {&(0x7f00000035c0)="89e8ae659708fe413dec0cfd0023fc0bf4c3ce4c7f08bddbef896188ee40dc6db622313eaea8ec960d2bafd3dfd15b96df5dc94a33062f26475f41b522b063cb1963521ad681c3370b530d9ba99c73b486096a029be7925b531e08e5fd72a8cd9636aeb481b5b32ad20ce6d959f3c88b5c27b20bfe08ffd42228da98408872ba3b49c2924b190650869519ef585d65a3e6283d63cfe0e16b3e4f", 0x9a}, {&(0x7f0000003680)="e349b769f474816ac4fac986a18a573b7acf90c0b56be2878b80ce01ac0922cb68af422641c795012203d0877be1ae373ee31adbe8cd289e830c42a4c962f2c80b9bf60e42b4a6dc909249b3498d75af14f2f6e33d97a1b9989f72652e7a6a9fb8ff86c69f33b0", 0x67}, {&(0x7f0000003700)="cfd6d70d8114979b8e9f0dbb356571e82185bada9136ca1dead96bd78e2dabef86650c61110651975fc3f65da06e00c0a1ffca66c0cf77e28373b88f817f76ae5549b380417a6d395bd72811c4fe8833", 0x50}, {&(0x7f0000003780)="9a52f02aad13be1c94d1841d163183a291737b3bbda577df6d1e9801dab7d98345aea70da6a4ae3bc4951baff7", 0x2d}, {&(0x7f00000037c0)="9817c6220d7af79d8a962e88b2157d521f4ea58bb5b6670487d4c696ddf45a433547733dcb7b94bf304636b7a3e47bc5cc1d88c7917568c0fd94f68bad0dcd838f20c4fe795a5e30894b4ab2f59122edb41226c08eb20b9fe4342b8227d4511635150c4b68117a1cfa01c9270f7f07310081d6cde7e622dfb844f23b34486cd5dc818c4102b317bcfca9bb85241d699d9651eddb6f96eb8de871cee6f29de572d6c4b8526cfe", 0xa6}, {&(0x7f0000003880)="e7ac75354ac4abba472707e62ceb68825d4b0cc96d0c6a07bcfc7bf3bd2906753f905730353d7671b3b62208c343868da8ccfdca71b00a2b9a75ed36a1d68d6814da41f905bae52b80b357a974c7a91d1cc68597e8e28856248003a385017885f89b4bd53e11df5cbac829ee26dd49b86018f2c0be688aedc9eb18403cbfd10623bc58f23012622833ba1c0b62b24274b1fce9e275f162", 0x97}, {&(0x7f0000003940)="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", 0x1000}, {&(0x7f0000004940)="37ebf9f795e7c5a1518f8324d2b8f5bb2ba6c9b8f7ca84675d48077efc54edac7f135391de6a35ee0904d15a000cf99c7b832daf904f0621f1b9c662d240ecc5e1f7a106954723caec3acaff20ee6be19521afb5c86f9e5f4e2adec5d7ba47", 0x5f}, {&(0x7f00000049c0)="63983b83e1074011287b63051b1f5b492268ca1ca80b37eb0f17cc5672550ec889efddd2ef8844fcb37f462abe5e44e5579767675942abc50ea071", 0x3b}], 0xa, &(0x7f0000004a80)=[{0x100c, 0x1ff, 0x1, "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"}], 0x100c, 0x4}, 0x1}, {{&(0x7f0000005ac0)=@ethernet={0x307}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000005b40)="24208e81bda4ad04a3c47bbdf3dd514b515067ed0c388dd73be4da843ca770d78b3e6057e799952cc42ac3f655ec1878e56679009c4b7adc47c81fac14e2017cb2f0f2e19fec254ca8c2c73754fcd1d50172691cc5fd87877a9a771d2ff160ebf75c80e8f4adc1b7bb63c790e4eadb0400f01fd623e1b9806bf24b8846bb3bb60a47bafe532bba504107c7e62094169310459e6349e341e0ee50a686", 0x9c}, {&(0x7f0000005c00)="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", 0xfc}, {&(0x7f0000005d00)="b7bc94b3dcf13acb2314fd52d9955f5d9a3074d5eca739db75bf36ffc8a06e6b37ded35b35b0a3449b5d618f1cadf0ed4d02f53f54008b790eed9f3dd8f96a8c47b04d06bbd5eea4531a9f62de6883156f1475d60817428a2e5e135b42508458147838668892e236eb60b5eafc64a3a90c82b5fc7607346f5b30e94e1e02ebbdd5ba092ac02929aa0a9969abd1a2acfdaf293f638133ee5d9fce76b6c87ea8066b6d848847a4fed53c954a547dc66de4f9efbec4ad40973fbe68d9e3769e812a2b112ef75f54ff32ce21db83dc09547a18549729311c39d28f5d99edb025e8ec11a83feaf6f3f358b4c4707074ec9c178056e78ef22a371b", 0xf8}, {&(0x7f0000005e00)="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", 0x1000}, {&(0x7f0000006e00)="3a0d2089eef49251720f7fe7973fab40b93df6309802df030c88cc6186da33732606d2cd56a4c60b2d6ccbf4058e155f824c4e0e5ec65f391f15c3473d2c3863a386dcb06bfeede7c61805b97a614ceb31de032b4549e3fa46e52a6403896a7362ddbdaf254b82366147829707c2e08c8595c395eadfddb5c388b2d6fee4be6fb6cf16faeca8ebdcfd175ba231c651fb8de89d74c6e986a543bd254b628f39ad7e90dbde311e617d73ac615438baf41c63bbcacc664250ba404ee07e7ba2d9d88bce0e0641cd0c48373bbc6298ce1cba031ae538d249e5d8921b25a0b19423ac91cf51910053b36c7d04f8c3", 0xec}], 0x5, 0x0, 0x0, 0x1}, 0x4}, {{&(0x7f0000006f40)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x80, &(0x7f00000071c0)=[{&(0x7f0000006fc0)="611cb0444b55bcd4f1ec87d4e2dcb468c7cabd587cebf5186c7b5cf03cb749b02e8e7e1b91a52f818cbad28cbd56eb6a0ad8efc8aad5244065f6ec94866520ddc63aab878483bb1e1483dd0fef9590ace2b8cd6233da05681a9c5475ea9b33fe1afbada698cd39c6751b7a91809cc76d5710aec32a9236e7b6ae580a8ea979795304e8fddb4942218718f6b748ffa441c40cc8555e6415352a8e156a03f0a6132caf7bf609a2ac877f773cbb7a6f850659f8dd84305516b47cfddc4d35024fa4744be134", 0xc4}, {&(0x7f00000070c0)="58ead6744bbc8911553f3437ffc787be31e39b1d3e081153f44a039a2454441b6b7fd27a003d67ad1471999052748c1a4e9b87355f3581ea6d818e610b81fc4ecd0dca8bfefafac3515277e6631dde9964d0e675dd7af56d05d67c31edd2eb6e6dc67d7a35e5191a333b0a16345be3d1bc8583bd3ea831b2a78a92d98ea9bccf53f68dd846c6975a45459f27e595a40da912a7d5501f6e7d27ec8ef8869f2a0b9e6bf99f60feb7fcbad84d6ed4ac6b9a906b3b27a8fd4b90ccfb6d70311079a194ae16e7772052f1b7a58c68", 0xcc}], 0x2, &(0x7f0000007200)=[{0x104, 0x0, 0x67bf873d, "f93462905b7e0d885b502e55a99d9722ded4c652d2d202ae9e02fd068dc83a84631af3ea01945ab29fd5e8d94e8832ba9703fd3ab800d5b27162182c421c9030c5e764fc851b694060fc2e5db68383b119b430224d8ae150edad9ebbe6ce66b6f30d3e588190ec4275ad15ff660f5a67edda8f028f9b1a13c33ab65d5b206e32e97e02176cadb5be08f99f961e9af929c3bd247c6ec07aeaf73adeddaa019589291c3a764cc84a37f80fff6f428f8dbd649a578739c89c1df82cc25bbc62f6e3733b5278ff95997bb72dd4d745f1aae7757294437819c8eadc1847672b485769007adcec264a3dc7e4fee9b59aa4eb351b0635b9078a9aaa"}, {0x10c, 0x11f, 0x0, "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"}], 0x210, 0x20000000}, 0x8000}, {{&(0x7f0000007440)=@generic={0x11, "4fa45dcf87e729d0f61356e0d835a49733812af33d05bc131ee926459ef70215f5917aca9666cb0ea80e2897e589b6976485943a0607babafdb44ed9f33f36d0b25d4a2925fc0247de1bf1ba5817349c8b2472a54ddf2188dc4f810f338aa47465a0c863c06e50620f06da3326872f310d0e5f524c42a56c88924a675fe9"}, 0x80, &(0x7f00000075c0)=[{&(0x7f00000074c0)="7a8e282dc01d555e6ec14f64482af1f677031764d44fd3ae29271add922927c61bcec1b5f985f53c0eb718fe1673578279607c4b37de73ce6377c0af1618d5ce504b341c6632d803694163ffa413709644b975a8ebe655dddc4fc283e08b38aed3dc7c39bf89a8fe5b9860bde1008b6f85f320cdeae213375e0f504cb35b0d3361f3e86c3a8d72fb0a1d7d8330bd7c7935147991114568a89a58f1fe8e744bc9921e865c251498c5136ce935cafaf37b2f653b510129af43e29f7023610642c7c4f2f759cea70df325e7243ebbbe04bd45c4fc6c7674b355bb6450eab71082a89f15f12a5e43885d", 0xe8}], 0x1, &(0x7f0000007600)=[{0x20, 0x10e, 0x2, "0556b5d4d6749472565dc17f9eb3d60269d8"}], 0x20, 0x11}, 0x21a}, {{&(0x7f0000007640)=@sco={0x1f, {0xfffffffffffffffa, 0x7fff, 0x8001, 0x7b758a55, 0x1, 0x6}}, 0x80, &(0x7f0000007a40)=[{&(0x7f00000076c0)="8eec553cec126dda850b1ab64fded016e76521daeddb8b8a60a3153864492df46b2cbd2925dbaac66aee2e6dd991fdfe08eb20a122200e21", 0x38}, {&(0x7f0000007700)="876d6d5f674e7a86db76c412662842fb5df312a5e7cb4efd470f2730c63bdf47b1530388fa266b1653e3d69c29caa549aaa34f85fb5e6a7d453554e5e8eaf8e45d8617f1b03a10a50c6f92b9cbe00184cc9235d303d20c794d3a49119077382bdb0e9c2b8e601cd3452ceecc6289ca932df108e71d393a75e6a5d10548476acdfc06d937ccc91d6a01998c6d8e5c3a9d3c3e8b6dd91a069163c83959b18a5142cba95fff93ae5e1af63e6d25eb2f4001ab10c8720b5e0021e11822f1f32d101a67f06f61471a25e91bdb81107ca7ba0140b613679347ed3ea17f927ef56c", 0xde}, {&(0x7f0000007800)}, {&(0x7f0000007840)="51dfcfdfb0021b9ba8e0bf11d787c99258e561a4c04189aff99918175588b6232626cf06ef62d8199317f94d96a06c83d2bfd1f3e657c2fcf0daf7a5731ea329bdbd999f487c2c8e629f3f48881452a89b6abcafd0c88bc2827ea882986c272f11340c3e59c16e146e90e8537cbe43f9f13ca996982d3c7d9bdf175f931ddee82e11056d6d36a6849e027242485992cde90ad952e8bebeff12cb3264ec1fef975c6803cd936c02f71ae10d7d3ae63ba431c0444cd03ceb8d973da01c3dac62ec731be1cb845b210800be7d762af0e81bbe976ba3dff2aae3999e84fb65fcfa80828e06a036d34280357b8b1ef189c7a704e78558aa79", 0xf6}, {&(0x7f0000007940)="82fe70d5162aa8daeaa5aebd403368815f443a9ca980620b42b0114b8d0f2feaef34", 0x22}, {&(0x7f0000007980)="07031fd37a9aa52a57673f05cd7ee2426a3180ac813c379ccf79f961312931cd26a411be140de0f8c49d81fcf4aef551eeb91022df748c2308b7ef06b478add2424614c827e6d4ab73512c70ad165b296a2538fc54ad6079d090d1ad6f70c1e91daa476bc2850d5c3fa3a5dedb7452a6c2c6b37d0e4d7d95666dc07d4a24954ce18cf454212c35bf5be7cab815dc083ba5ebf5c6e64802e852eae113c56a0451d7ecdf426551bc63f6b66e98c2", 0xad}], 0x6, &(0x7f0000007a80)=[{0x7c, 0x104, 0x3, "b27f38ea5985c61b767bdb6bb1cfcdbf0d6d6332b2ed6ee418b9bd03ec4508d98bc89f498824cbc09470215186f237e74f2b5c203aaf608404c2e17c0977f799e4f3d2a110e4fca91310695da650b8b2fa5f2af1dfc86f1f136120f45cb2c71b4b954f1f356f52a3b14ca6969c"}, {0xec, 0x104, 0x1, "4434b9ecfffcb68d7277ba09526f6d4e08483f99e0028f76a8bfb097ae188bff76649a2c756ce8285d5b6ceb4588029e124d914c0802430f399363a7cbfa06102e6df069185fa9ddcf582f7d9d844e92f6d07f834d1c57c9a923c90c00c6d339e7f47df7b004f1f4c181de66723aad492f6bb61f02053f0a71fcc17bca674229474ac82888d8fe7ef8e0929685f7568a8e5aae77c4ed0365ac520bb5f27a33b218930480542d54708eccd1d89fc81ed2dc064081bc8a975947fff36cd51d836e606ff255b56e22c2ddc57e8ccc795de7114df81fa4ac006499ff99a37049cc"}], 0x168, 0x84}, 0x9}], 0x9, 0x4000001)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x400000000000027, 0xa00)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)

16:57:52 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x0, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:52 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{0x3}, 'syz1\x00'})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x242, 0x4)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
signalfd4(r0, &(0x7f00000000c0)={0x4}, 0x8, 0x800)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x103000, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write(r0, &(0x7f0000000440)="c7d8ea5476c7620385247e3162526ca1137247a8e94a93076d71495f11e24cdc4a8415ea07f4242af359f6e91a18a3edd092693a6209fdf5ec4c80dded9a21d4e10808b389f15650c17bd3a80f127aa02dd8faf4b8f0e57e90df75ce326985c1c519c0643790002d3047d9526249b9780df95bfb1a752a54907a177680cd1104e6cb7325cbaec33724b28f929cb8ae71ba29a0aa346cb6350a2d367ca5e6cc354e374fbc2e69423a4cb940554d74e969c91900000000000000037bcca6c1b435f50fee5fa121ec01938b6d09e3f5c5137a104744", 0x42a)

16:57:52 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:52 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff0000000000000000000ec000"], 0x14}}, 0x0)

16:57:52 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x0, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2391.954398] syz-executor1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0
[ 2391.985278] input: syz1 as /devices/virtual/input/input1781
[ 2392.055990] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2392.070219] CPU: 0 PID: 1614 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2392.077525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2392.086903] Call Trace:
[ 2392.089509]  dump_stack+0x244/0x39d
[ 2392.093151]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2392.093173]  ? mark_held_locks+0x130/0x130
[ 2392.093189]  ? mark_held_locks+0x130/0x130
[ 2392.093210]  dump_header+0x27b/0xf72
[ 2392.102633]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.102653]  ? check_preemption_disabled+0x48/0x280
[ 2392.102669]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.102688]  ? pagefault_out_of_memory+0x197/0x197
[ 2392.102703]  ? debug_smp_processor_id+0x1c/0x20
[ 2392.102723]  ? perf_trace_lock+0x14d/0x7a0
[ 2392.121197]  ? debug_smp_processor_id+0x1c/0x20
[ 2392.121214]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2392.121235]  ? lock_is_held_type+0x210/0x210
[ 2392.121253]  ? perf_trace_lock+0x7a0/0x7a0
[ 2392.121271]  ? debug_smp_processor_id+0x1c/0x20
[ 2392.121289]  ? perf_trace_lock+0x14d/0x7a0
[ 2392.145280]  ? zap_class+0x640/0x640
[ 2392.145300]  ? print_usage_bug+0xc0/0xc0
[ 2392.145315]  ? lock_is_held_type+0x210/0x210
[ 2392.145346]  ? find_held_lock+0x36/0x1c0
[ 2392.145371]  ? mark_held_locks+0xc7/0x130
[ 2392.154059] input: syz1 as /devices/virtual/input/input1782
[ 2392.154699]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2392.154714]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2392.154733]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2392.208650]  ? trace_hardirqs_on+0xbd/0x310
[ 2392.212982]  ? kasan_check_read+0x11/0x20
[ 2392.217142]  ? ___ratelimit+0x3b4/0x672
[ 2392.221132]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2392.226298]  ? trace_hardirqs_on+0x310/0x310
[ 2392.230714]  ? lock_downgrade+0x900/0x900
[ 2392.234876]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2392.239991]  ? ___ratelimit+0x3b9/0x672
[ 2392.243987]  ? idr_get_free+0xf70/0xf70
[ 2392.247968]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2392.252500]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2392.257022]  oom_kill_process.cold.27+0x10/0x903
[ 2392.261830]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2392.266353]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2392.270960]  ? oom_evaluate_task+0x540/0x540
[ 2392.275394]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.280946]  ? cgroup_procs_next+0x70/0x70
[ 2392.285201]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2392.289709]  ? oom_badness+0xaa0/0xaa0
[ 2392.293610]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2392.298379]  ? mem_cgroup_iter_break+0x30/0x30
[ 2392.302994]  ? mark_held_locks+0xc7/0x130
[ 2392.307156]  out_of_memory+0xa84/0x1430
[ 2392.311164]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2392.316239]  ? kasan_check_read+0x11/0x20
[ 2392.320416]  ? oom_killer_disable+0x3a0/0x3a0
[ 2392.325074]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2392.329933]  ? memory_oom_group_write+0x160/0x160
[ 2392.334786]  ? memcg_kmem_charge_memcg+0x7c/0x120
[ 2392.339662]  ? page_counter_try_charge+0x1c1/0x220
[ 2392.344635]  try_charge+0xda9/0x1700
[ 2392.348371]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2392.353051]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2392.357990]  ? kasan_check_read+0x11/0x20
[ 2392.362167]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2392.367469]  ? rcu_softirq_qs+0x20/0x20
[ 2392.371487]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2392.377043]  ? lock_page_memcg+0x350/0x350
[ 2392.381300]  ? lock_acquire+0x1ed/0x520
[ 2392.385291]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2392.390664]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.396212]  ? check_preemption_disabled+0x48/0x280
[ 2392.401248]  memcg_kmem_charge_memcg+0x7c/0x120
[ 2392.405932]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 2392.410446]  ? debug_smp_processor_id+0x1c/0x20
[ 2392.415131]  memcg_kmem_charge+0x149/0x350
[ 2392.419400]  __alloc_pages_nodemask+0x75e/0xea0
[ 2392.424087]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[ 2392.429116]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.434687]  ? check_preemption_disabled+0x48/0x280
[ 2392.439710]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.445258]  ? zap_class+0x640/0x640
[ 2392.449757]  ? __lock_is_held+0xb5/0x140
[ 2392.453844]  ? lock_downgrade+0x900/0x900
[ 2392.458011]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2392.463573]  alloc_pages_current+0x173/0x350
[ 2392.467997]  pte_alloc_one+0x1b/0x1a0
[ 2392.471835]  __pte_alloc+0x2a/0x350
[ 2392.475475]  copy_page_range+0x2017/0x2ee0
[ 2392.479775]  ? __pmd_alloc+0x450/0x450
[ 2392.483696]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2392.488560]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2392.493431]  ? __save_stack_trace+0x8d/0xf0
[ 2392.497779]  ? rb_insert_color_cached+0x14b0/0x14b0
[ 2392.502892]  ? check_preemption_disabled+0x48/0x280
[ 2392.507952]  ? debug_smp_processor_id+0x1c/0x20
[ 2392.512629]  ? debug_smp_processor_id+0x1c/0x20
[ 2392.517303]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2392.522243]  ? lock_is_held_type+0x210/0x210
[ 2392.526669]  ? zap_class+0x640/0x640
[ 2392.530389]  ? lock_downgrade+0x900/0x900
[ 2392.534549]  ? zap_class+0x640/0x640
[ 2392.538290]  ? find_held_lock+0x36/0x1c0
[ 2392.542402]  ? copy_process+0x4413/0x87a0
[ 2392.546572]  ? lock_downgrade+0x900/0x900
[ 2392.550729]  ? lock_release+0xa00/0xa00
[ 2392.554707]  ? perf_trace_sched_process_exec+0x860/0x860
[ 2392.560162]  ? dup_userfaultfd+0x6d8/0x890
[ 2392.564458]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2392.569575]  ? vma_compute_subtree_gap+0x160/0x240
[ 2392.574537]  ? validate_mm_rb+0xaa/0xc0
[ 2392.578539]  ? __vma_link_rb+0x26c/0x370
[ 2392.582609]  copy_process+0x45e9/0x87a0
[ 2392.586627]  ? __cleanup_sighand+0x70/0x70
[ 2392.590877]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.596455]  ? check_preemption_disabled+0x48/0x280
[ 2392.601474]  ? find_held_lock+0x36/0x1c0
[ 2392.605543]  ? perf_trace_lock+0x14d/0x7a0
[ 2392.609780]  ? try_to_wake_up+0x11c/0x1490
[ 2392.614063]  ? lock_is_held_type+0x210/0x210
[ 2392.618479]  ? trace_hardirqs_off+0xb8/0x310
[ 2392.622907]  ? kasan_check_read+0x11/0x20
[ 2392.627066]  ? zap_class+0x640/0x640
[ 2392.630785]  ? lock_acquire+0x1ed/0x520
[ 2392.634777]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2392.639382]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.644931]  ? find_held_lock+0x36/0x1c0
[ 2392.649019]  ? do_wp_page+0x127c/0x2920
[ 2392.653007]  ? lock_downgrade+0x900/0x900
[ 2392.657172]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2392.661506]  ? perf_trace_lock+0x7a0/0x7a0
[ 2392.665759]  ? kasan_check_read+0x11/0x20
[ 2392.669911]  ? do_raw_spin_unlock+0xa7/0x330
[ 2392.674326]  ? do_raw_spin_trylock+0x270/0x270
[ 2392.678921]  ? pgd_free+0x380/0x380
[ 2392.682688]  ? _raw_spin_unlock+0x2c/0x50
[ 2392.686849]  ? do_wp_page+0x528/0x2920
[ 2392.690737]  ? find_held_lock+0x36/0x1c0
[ 2392.694841]  ? finish_mkwrite_fault+0x650/0x650
[ 2392.699515]  ? __lock_acquire+0x62f/0x4c20
[ 2392.703765]  ? mark_held_locks+0x130/0x130
[ 2392.708020]  ? lock_downgrade+0x900/0x900
[ 2392.712211]  ? __lock_acquire+0x62f/0x4c20
[ 2392.716476]  ? __lock_acquire+0x62f/0x4c20
[ 2392.720715]  ? perf_trace_lock+0x14d/0x7a0
[ 2392.724959]  ? debug_smp_processor_id+0x1c/0x20
[ 2392.729629]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2392.734578]  ? mark_held_locks+0x130/0x130
[ 2392.738835]  ? perf_trace_lock+0x14d/0x7a0
[ 2392.743091]  ? debug_smp_processor_id+0x1c/0x20
[ 2392.747771]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.753328]  ? check_preemption_disabled+0x48/0x280
[ 2392.758363]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.763910]  ? check_preemption_disabled+0x48/0x280
[ 2392.768930]  ? __lock_is_held+0xb5/0x140
[ 2392.773010]  ? print_usage_bug+0xc0/0xc0
[ 2392.777103]  ? print_usage_bug+0xc0/0xc0
[ 2392.781201]  ? find_held_lock+0x36/0x1c0
[ 2392.785276]  ? __lock_acquire+0x62f/0x4c20
[ 2392.789515]  ? zap_class+0x640/0x640
[ 2392.793254]  ? ktime_get_coarse_real_ts64+0x273/0x370
[ 2392.798464]  ? mark_held_locks+0x130/0x130
[ 2392.802711]  ? lock_acquire+0x1ed/0x520
[ 2392.806697]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2392.811316]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.816870]  ? check_preemption_disabled+0x48/0x280
[ 2392.821900]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.827447]  ? check_preemption_disabled+0x48/0x280
[ 2392.832469]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.838017]  ? debug_smp_processor_id+0x1c/0x20
[ 2392.842692]  ? perf_trace_lock+0x14d/0x7a0
[ 2392.846933]  ? debug_smp_processor_id+0x1c/0x20
[ 2392.851614]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2392.856574]  ? lock_is_held_type+0x210/0x210
[ 2392.860996]  ? perf_trace_lock+0x7a0/0x7a0
[ 2392.865250]  ? zap_class+0x640/0x640
[ 2392.868976]  ? zap_class+0x640/0x640
[ 2392.872699]  ? lock_is_held_type+0x210/0x210
[ 2392.877125]  ? perf_trace_lock+0x7a0/0x7a0
[ 2392.881379]  ? find_held_lock+0x36/0x1c0
[ 2392.885458]  _do_fork+0x1cb/0x11d0
[ 2392.889011]  ? fork_idle+0x1d0/0x1d0
[ 2392.892728]  ? __do_page_fault+0x620/0xe60
[ 2392.896985]  ? kasan_check_read+0x11/0x20
[ 2392.901144]  ? _copy_to_user+0xc8/0x110
[ 2392.905128]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2392.910669]  ? put_old_timespec32+0x110/0x280
[ 2392.915189]  ? get_old_timespec32+0x2a0/0x2a0
[ 2392.919821]  ? do_fast_syscall_32+0x150/0xfb2
[ 2392.924328]  ? do_fast_syscall_32+0x150/0xfb2
[ 2392.928876]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2392.933478]  ? trace_hardirqs_on+0xbd/0x310
[ 2392.937797]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.943380]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2392.947965]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2392.953067]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2392.958623]  __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2392.963643]  do_fast_syscall_32+0x34d/0xfb2
[ 2392.967984]  ? do_int80_syscall_32+0x890/0x890
[ 2392.972567]  ? entry_SYSENTER_compat+0x68/0x7f
[ 2392.977199]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2392.982240]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2392.987088]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2392.991948]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2392.996980]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2393.002024]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2393.006894]  entry_SYSENTER_compat+0x70/0x7f
[ 2393.011302] RIP: 0023:0xf7fb2a29
[ 2393.014690] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 2393.033592] RSP: 002b:000000000845fd70 EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[ 2393.041324] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000
[ 2393.048597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000895a968
16:57:53 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:53 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2393.055866] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2393.063150] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2393.070443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:57:53 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000000000000000800"], 0x14}}, 0x0)

16:57:53 executing program 0:
r0 = socket$packet(0x11, 0x1, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x572d3170, 0x1)
ioctl$RTC_WIE_OFF(r2, 0x7010)
write$binfmt_elf32(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x4, 0x7, 0x7f, 0x401, 0x0, 0x3e, 0x7082, 0x2e8, 0x38, 0x199, 0x3, 0x500b, 0x20, 0x2, 0x10001, 0x1, 0x100000000}, [{0x70000000, 0x3ff, 0x78, 0x100, 0x100000000, 0x7, 0x2, 0x4}], "ee7bd15a77c8fb0767058d80ac32e107324021d5454c4e35bb072a85b99433164e3929d067780c78b5d3b1ced24b7fd18dc9ce921c429343162edd09580809afcb9713c5c0dba960a55406330a8010f010a992dc7fcb6ac9ea57f178fd27b32bef59d5990d0eb0f0209a25b290a5cecbbb5f7008c0e17cbddff04206cf8037d392ab2f2d581bdba462", [[]]}, 0x1e1)
sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0xa00)

16:57:53 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 2393.212515] Task in /syz1 killed as a result of limit of /syz1
[ 2393.221688] memory: usage 307200kB, limit 307200kB, failcnt 189
[ 2393.227795] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2393.316047] input: syz1 as /devices/virtual/input/input1783
[ 2393.425680] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2393.435790] Memory cgroup stats for /syz1: cache:16KB rss:274812KB rss_huge:258048KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:275024KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 2393.480729] Memory cgroup out of memory: Kill process 4378 (syz-executor1) score 1106 or sacrifice child
[ 2393.502423] Killed process 4378 (syz-executor1) total-vm:70384kB, anon-rss:2220kB, file-rss:33476kB, shmem-rss:0kB
16:57:53 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x0, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:53 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:53 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x0, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:53 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='/dev/uinput\x00', r1}, 0x10)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0185648, &(0x7f0000000280)={0x9c0000, 0xfffffffffffffffb, 0x4, [], &(0x7f0000000140)={0x0, 0xffffffffffffffdd, [], @string=&(0x7f0000000100)}})

16:57:53 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff00000000000000fffffff000"], 0x14}}, 0x0)

16:57:53 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0xa00)

[ 2393.706486] input: syz1 as /devices/virtual/input/input1785
[ 2393.722905] syz-executor1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0
[ 2393.781255] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2393.786394] CPU: 0 PID: 1614 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2393.793663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2393.803029] Call Trace:
[ 2393.805642]  dump_stack+0x244/0x39d
[ 2393.809273]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2393.814482]  ? mark_held_locks+0x130/0x130
[ 2393.818718]  ? mark_held_locks+0x130/0x130
[ 2393.822993]  dump_header+0x27b/0xf72
[ 2393.826736]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2393.832287]  ? check_preemption_disabled+0x48/0x280
[ 2393.837303]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2393.842871]  ? pagefault_out_of_memory+0x197/0x197
[ 2393.847831]  ? debug_smp_processor_id+0x1c/0x20
[ 2393.852502]  ? perf_trace_lock+0x14d/0x7a0
[ 2393.856767]  ? debug_smp_processor_id+0x1c/0x20
[ 2393.861461]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2393.866401]  ? lock_is_held_type+0x210/0x210
[ 2393.870874]  ? perf_trace_lock+0x7a0/0x7a0
[ 2393.875136]  ? debug_smp_processor_id+0x1c/0x20
[ 2393.879825]  ? perf_trace_lock+0x14d/0x7a0
[ 2393.884071]  ? zap_class+0x640/0x640
[ 2393.887799]  ? print_usage_bug+0xc0/0xc0
[ 2393.891883]  ? lock_is_held_type+0x210/0x210
[ 2393.896325]  ? find_held_lock+0x36/0x1c0
[ 2393.900405]  ? mark_held_locks+0xc7/0x130
[ 2393.904562]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2393.909720]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2393.914858]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2393.919451]  ? trace_hardirqs_on+0xbd/0x310
[ 2393.923778]  ? kasan_check_read+0x11/0x20
[ 2393.927942]  ? ___ratelimit+0x3b4/0x672
[ 2393.931934]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2393.937088]  ? trace_hardirqs_on+0x310/0x310
[ 2393.941503]  ? lock_downgrade+0x900/0x900
[ 2393.945657]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2393.950762]  ? ___ratelimit+0x3b9/0x672
[ 2393.954738]  ? idr_get_free+0xf70/0xf70
[ 2393.958712]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2393.963207]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2393.967730]  oom_kill_process.cold.27+0x10/0x903
[ 2393.972487]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2393.976990]  ? lockdep_hardirqs_on+0x3bb/0x5b0
16:57:54 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff00000000f000000000000000"], 0x14}}, 0x0)

[ 2393.981607]  ? oom_evaluate_task+0x540/0x540
[ 2393.986039]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2393.991586]  ? cgroup_procs_next+0x70/0x70
[ 2393.995845]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2394.000377]  ? oom_badness+0xaa0/0xaa0
[ 2394.004306]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2394.009088]  ? mem_cgroup_iter_break+0x30/0x30
[ 2394.013692]  ? mark_held_locks+0xc7/0x130
[ 2394.017874]  out_of_memory+0xa84/0x1430
[ 2394.021876]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2394.026484]  ? kasan_check_read+0x11/0x20
[ 2394.030638]  ? oom_killer_disable+0x3a0/0x3a0
[ 2394.035164]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2394.040027]  ? memory_oom_group_write+0x160/0x160
[ 2394.044886]  ? memcg_kmem_charge_memcg+0x7c/0x120
[ 2394.049756]  ? page_counter_try_charge+0x1c1/0x220
[ 2394.054703]  try_charge+0xda9/0x1700
[ 2394.058442]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2394.063134]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2394.068073]  ? kasan_check_read+0x11/0x20
[ 2394.072229]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2394.077513]  ? rcu_softirq_qs+0x20/0x20
[ 2394.081513]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2394.087060]  ? lock_page_memcg+0x350/0x350
[ 2394.091311]  ? lock_acquire+0x1ed/0x520
[ 2394.095292]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2394.100670]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2394.106233]  ? check_preemption_disabled+0x48/0x280
[ 2394.111269]  memcg_kmem_charge_memcg+0x7c/0x120
[ 2394.115944]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 2394.120449]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2394.125403]  memcg_kmem_charge+0x149/0x350
[ 2394.129652]  __alloc_pages_nodemask+0x75e/0xea0
[ 2394.134354]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[ 2394.139404]  ? find_held_lock+0x36/0x1c0
[ 2394.143482]  ? __pmd_alloc+0x373/0x450
[ 2394.147380]  ? lock_downgrade+0x900/0x900
[ 2394.151543]  ? kasan_check_read+0x11/0x20
[ 2394.155695]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2394.161262]  alloc_pages_current+0x173/0x350
[ 2394.165687]  pte_alloc_one+0x1b/0x1a0
[ 2394.169497]  __pte_alloc+0x2a/0x350
[ 2394.173167]  copy_page_range+0x2017/0x2ee0
[ 2394.177419]  ? mark_held_locks+0x130/0x130
[ 2394.181693]  ? __pmd_alloc+0x450/0x450
[ 2394.185582]  ? vma_interval_tree_augment_rotate+0x181/0x1e0
[ 2394.191302]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2394.196156]  ? rb_insert_color_cached+0x14b0/0x14b0
[ 2394.201201]  ? check_preemption_disabled+0x48/0x280
[ 2394.206241]  ? debug_smp_processor_id+0x1c/0x20
[ 2394.210920]  ? perf_trace_lock+0x14d/0x7a0
[ 2394.215194]  ? debug_smp_processor_id+0x1c/0x20
[ 2394.219871]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2394.224824]  ? lock_is_held_type+0x210/0x210
[ 2394.229260]  ? find_held_lock+0x36/0x1c0
[ 2394.233334]  ? zap_class+0x640/0x640
[ 2394.237089]  ? zap_class+0x640/0x640
[ 2394.240826]  ? lock_downgrade+0x900/0x900
[ 2394.245026]  ? find_held_lock+0x36/0x1c0
[ 2394.249153]  ? copy_process+0x4413/0x87a0
[ 2394.253306]  ? lock_downgrade+0x900/0x900
[ 2394.257467]  ? lock_release+0xa00/0xa00
[ 2394.261502]  ? perf_trace_sched_process_exec+0x860/0x860
[ 2394.266979]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2394.272011]  ? vma_compute_subtree_gap+0x160/0x240
[ 2394.276971]  ? validate_mm_rb+0xaa/0xc0
[ 2394.280968]  ? __vma_link_rb+0x26c/0x370
[ 2394.285053]  copy_process+0x45e9/0x87a0
[ 2394.289086]  ? __cleanup_sighand+0x70/0x70
[ 2394.293334]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2394.298888]  ? check_preemption_disabled+0x48/0x280
[ 2394.303918]  ? find_held_lock+0x36/0x1c0
[ 2394.308015]  ? perf_trace_lock+0x14d/0x7a0
[ 2394.312753]  ? try_to_wake_up+0x11c/0x1490
[ 2394.317014]  ? lock_is_held_type+0x210/0x210
[ 2394.321444]  ? trace_hardirqs_off+0xb8/0x310
[ 2394.325863]  ? kasan_check_read+0x11/0x20
[ 2394.330036]  ? zap_class+0x640/0x640
[ 2394.333761]  ? lock_pin_lock+0x350/0x350
[ 2394.337873]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2394.343427]  ? find_held_lock+0x36/0x1c0
[ 2394.347511]  ? do_wp_page+0x127c/0x2920
[ 2394.351520]  ? lock_downgrade+0x900/0x900
[ 2394.355681]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2394.360017]  ? perf_trace_lock+0x7a0/0x7a0
[ 2394.364269]  ? kasan_check_read+0x11/0x20
[ 2394.368432]  ? do_raw_spin_unlock+0xa7/0x330
[ 2394.372869]  ? do_raw_spin_trylock+0x270/0x270
[ 2394.377467]  ? pgd_free+0x380/0x380
[ 2394.381121]  ? _raw_spin_unlock+0x2c/0x50
[ 2394.385283]  ? do_wp_page+0x528/0x2920
[ 2394.389209]  ? find_held_lock+0x36/0x1c0
[ 2394.393290]  ? finish_mkwrite_fault+0x650/0x650
[ 2394.397972]  ? __lock_acquire+0x62f/0x4c20
[ 2394.402221]  ? mark_held_locks+0x130/0x130
[ 2394.406469]  ? lock_downgrade+0x900/0x900
[ 2394.410649]  ? __lock_acquire+0x62f/0x4c20
[ 2394.414912]  ? __lock_acquire+0x62f/0x4c20
[ 2394.419160]  ? perf_trace_lock+0x14d/0x7a0
[ 2394.423421]  ? debug_smp_processor_id+0x1c/0x20
[ 2394.428129]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2394.433089]  ? mark_held_locks+0x130/0x130
[ 2394.437347]  ? perf_trace_lock+0x14d/0x7a0
[ 2394.441598]  ? debug_smp_processor_id+0x1c/0x20
[ 2394.447053]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2394.452605]  ? check_preemption_disabled+0x48/0x280
[ 2394.457643]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2394.463193]  ? check_preemption_disabled+0x48/0x280
[ 2394.468218]  ? __lock_is_held+0xb5/0x140
[ 2394.472293]  ? print_usage_bug+0xc0/0xc0
[ 2394.476376]  ? print_usage_bug+0xc0/0xc0
[ 2394.480457]  ? find_held_lock+0x36/0x1c0
[ 2394.484530]  ? __lock_acquire+0x62f/0x4c20
[ 2394.488764]  ? zap_class+0x640/0x640
[ 2394.492481]  ? ktime_get_coarse_real_ts64+0x273/0x370
[ 2394.497679]  ? mark_held_locks+0x130/0x130
[ 2394.501948]  ? lock_acquire+0x1ed/0x520
[ 2394.505938]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2394.510529]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2394.516086]  ? check_preemption_disabled+0x48/0x280
[ 2394.521117]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2394.526656]  ? check_preemption_disabled+0x48/0x280
[ 2394.531672]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2394.537214]  ? debug_smp_processor_id+0x1c/0x20
[ 2394.541897]  ? perf_trace_lock+0x14d/0x7a0
[ 2394.546196]  ? debug_smp_processor_id+0x1c/0x20
[ 2394.550864]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2394.555808]  ? lock_is_held_type+0x210/0x210
[ 2394.560225]  ? perf_trace_lock+0x7a0/0x7a0
[ 2394.564464]  ? zap_class+0x640/0x640
[ 2394.568206]  ? zap_class+0x640/0x640
[ 2394.571920]  ? lock_is_held_type+0x210/0x210
[ 2394.576359]  ? perf_trace_lock+0x7a0/0x7a0
[ 2394.580637]  ? find_held_lock+0x36/0x1c0
[ 2394.584743]  _do_fork+0x1cb/0x11d0
[ 2394.588287]  ? fork_idle+0x1d0/0x1d0
[ 2394.592014]  ? __do_page_fault+0x620/0xe60
[ 2394.596260]  ? kasan_check_read+0x11/0x20
[ 2394.600404]  ? _copy_to_user+0xc8/0x110
[ 2394.604380]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2394.609921]  ? put_old_timespec32+0x110/0x280
[ 2394.614418]  ? get_old_timespec32+0x2a0/0x2a0
[ 2394.618917]  ? do_fast_syscall_32+0x150/0xfb2
[ 2394.623427]  ? do_fast_syscall_32+0x150/0xfb2
[ 2394.627923]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2394.632539]  ? trace_hardirqs_on+0xbd/0x310
[ 2394.636860]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2394.642419]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2394.647036]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2394.652158]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2394.657721]  __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2394.662759]  do_fast_syscall_32+0x34d/0xfb2
[ 2394.667103]  ? do_int80_syscall_32+0x890/0x890
[ 2394.671700]  ? entry_SYSENTER_compat+0x68/0x7f
[ 2394.676288]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2394.681302]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2394.686159]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2394.690997]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2394.696046]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2394.701071]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2394.705938]  entry_SYSENTER_compat+0x70/0x7f
[ 2394.710341] RIP: 0023:0xf7fb2a29
[ 2394.713707] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
16:57:55 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000000000003400000"], 0x14}}, 0x0)

16:57:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 2394.732601] RSP: 002b:000000000845fd70 EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[ 2394.740318] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000
[ 2394.747598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000895a968
[ 2394.754866] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2394.762135] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2394.769446] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2394.854373] Task in /syz1 killed as a result of limit of /syz1
[ 2394.862325] memory: usage 307200kB, limit 307200kB, failcnt 216
[ 2394.868405] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2394.875297] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2394.888362] Memory cgroup stats for /syz1: cache:16KB rss:274828KB rss_huge:258048KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:275040KB inactive_file:0KB active_file:0KB unevictable:0KB
16:57:55 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000300))
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x2d4542, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x101000, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={<r3=>0x0, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0x8}}, 0x93, 0x3}, &(0x7f0000000240)=0xfffffffffffffe01)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000380)={r3, 0xd7, "0eb98523664b2ab80ea5c3b72a15efd065b8385e21de00724bc07be72621c3e7716a9e6bd629e1a878ea69f0cc005c66eb3cae4d33feede50d9418f24c722020380d1acf3d7bb380a54c40e7e7052e549c20ffbfb129483f1487603c20288cf8cb1b893da31a1a1cf9e988f31dfbbd43658d34b8207f917d58a3ac6ab7905362741580347b5cfaf16761d5df5e1794502c662c748d1276c5b8a8f667ed3d4293b2f30ebe2ae423c428a68580648f82028fc41b40fc9447b6b8435b2fedf2826ff2f0989e51da03828e96c4812918e6dad2d2368d228e1a"}, &(0x7f0000000280)=0xdf)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000500)={0x7fff, 0x1})
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x0, 0xa00)

16:57:55 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0x2})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x40)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[ 2394.983683] Memory cgroup out of memory: Kill process 5481 (syz-executor1) score 1106 or sacrifice child
[ 2395.015030] Killed process 5481 (syz-executor1) total-vm:70648kB, anon-rss:2224kB, file-rss:33456kB, shmem-rss:0kB
16:57:55 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0xffffffffffffff86)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8063, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0xa00)
r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$revoke(0x3, r2)

[ 2395.180267] input: syz1 as /devices/virtual/input/input1787
[ 2395.267850] input: syz1 as /devices/virtual/input/input1788
16:57:55 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:57:55 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:55 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$VIDIOC_S_FBUF(r1, 0x402c560b, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000280)="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", {0xa, 0x9, 0x3231564e, 0xb, 0x1, 0x8, 0x2, 0x3}})
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:57:55 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, 0x0, 0x0)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:55 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000000007fffffff00"], 0x14}}, 0x0)

[ 2395.512060] input: syz1 as /devices/virtual/input/input1789
[ 2395.540018] input: syz1 as /devices/virtual/input/input1790
16:57:55 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
r1 = memfd_create(&(0x7f0000000140)='ppp0cgroup{self(-md5sumkeyring@+\x00', 0x1)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e23, 0x5, @loopback, 0x4}, {0xa, 0x4e21, 0x1, @local, 0x80000001}, 0x4edd2bd2, [0xff, 0x7, 0x1c7bfe32, 0x8, 0xfffffffffffffc00, 0x4, 0x101, 0x4]}, 0x5c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x400000000000027, 0xa00)

16:57:56 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x300)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000280)={0x6, 0x8, 0xf642, 0x8, [], [], [], 0x4, 0x1, 0xb9, 0xfb7d, "e92876e4333a67f235458f97716e1031"})
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:57:56 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, 0x0, 0x0)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:56 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:56 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000002800010b000000000000000006000057f6a7e69ab3fe3571b5e2766133bab1015cf10a09e092e6fc826057426dec35a3fdd986d1c39fcbc6a4d6871dcc729492a8e34532266954ba50c3b2c0c31c34f361146e703a2af6fd71108e39621a4a88b9e73d5386c73cd030cb55f10e0f789f433e414f720dcbd7149c469c00"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0)

16:57:56 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @remote}, &(0x7f0000000240)=0xc)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000300)={0x0, 0x80000, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
fstat(r2, &(0x7f0000000140))
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = dup(r2)
write$P9_RREAD(r4, &(0x7f0000000340)={0x21, 0x75, 0x1, {0x16, "7d363fdecb9e5741914bd434cbf90faf2e368b24e1e8"}}, 0x21)
sendmmsg(r2, &(0x7f00000002c0), 0x400000000000027, 0xa00)

16:57:56 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, 0x0, 0x0)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2395.926675] input: syz1 as /devices/virtual/input/input1792
16:57:56 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c000102000a00000000000000000000d613a92ee5e6a8486a08306745e2fce7cb71a4084635c4eecb51f717cf5604263559420ab71489948a1390301d", @ANYRES32=0x0, @ANYBLOB="000000000c000100f7e9e2a4c5d20000"], 0x28}}, 0x0)

[ 2395.983075] input: syz1 as /devices/virtual/input/input1793
16:57:56 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7fff)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x3, &(0x7f00000001c0)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000140)="8399723a0bbec99dd4d77c5156b7d43de0db6c59835f82c416848da44265e40538c3fa3cf91261605f745e6270de8812cc22083d136d775333b8f4b884121263838acddfd168bffaeeef1363eaf28b3f670989ae0b62872c", &(0x7f0000000300)="4fb11652cf9230a9295fcc574b657f20be508b1d4b20b17bac6a5bdcfe84d37b4ca5793177e4b80d2cbc33550baf0ad2de61a074f1fd7286cb647885a4c7a5093441f33db01358a9abf046e6db2addfa4a8c9281fec4a5b4ed642444170b2ea2d79456ef1aa903b28c2ff56abff67a8c15fdb74251f097c05ba1390942453caca09d1d66463368f4dda8983b8b1268fc533283d466008af3c4bb1cfce037a4d5d304e5854a78896f63ee784ac23f31bf4d411ab835ba1b04337944ef393ffbc3fc7d8dd82d7b9a41fad7df8e0bae61c188863073ecb9221613f8136f"}}, &(0x7f0000000200)=<r1=>0x0)
timer_getoverrun(r1)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x400000000000027, 0xa00)

16:57:56 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$inet(0x2, 0x5, 0x2, &(0x7f0000000000))
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000040)={0x0, "8572f8762defa051f68a627a39979e4218edb9fa0a17bd8dcce215c17025f13c"})
sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x20, 0x0, 0x1, 0x800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0)

16:57:56 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(0x0, 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:56 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000fffffffffffff00000"], 0x14}}, 0x0)

16:57:56 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x800, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:57:56 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2396.250439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'.
16:57:56 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2396.301563] input: syz1 as /devices/virtual/input/input1794
16:57:56 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.stat\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x100, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r1, &(0x7f0000000280))
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x501000, 0x0)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000380)="df97788c226aea51d5f76e29aa9c87062a5374")
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000340), 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x400000000000027, 0xa00)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2}}, {{@in=@multicast1}}}, &(0x7f0000000240)=0xe8)

[ 2396.365004] input: syz1 as /devices/virtual/input/input1795
[ 2396.439442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'.
16:57:56 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f00000000c0)=[{0x4, 0x6, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c)
r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc05c5340, &(0x7f0000000100))
ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=<r2=>0x0)
sched_getparam(r2, &(0x7f0000000200))
epoll_create(0xfffffffffffffc42)
ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000000)={0x7, 0x40, 0x62})

16:57:56 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:56 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x36c)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x4, 0x8)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:57:57 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff00000000000ec00000000000"], 0x14}}, 0x0)

16:57:57 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r2=>0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x3, 0x7, 0x0, 0x1a6, r2})
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0xffffffffe15237b3, @ipv4={[], [], @local}, 0x1}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @multicast2}], 0x6c)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000300)={<r5=>0x0, 0x10000, 0x30, 0x400, 0x6}, &(0x7f0000000340)=0x18)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000380)={r5, 0x1ff, 0x3}, 0x8)
sendmmsg(r3, &(0x7f00000002c0), 0x400000000000027, 0xa00)

16:57:57 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:57 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x240000, 0x80)
getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
mount(&(0x7f0000018000), &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000))
mknod$loop(&(0x7f00000000c0)='./file0/bus\x00', 0x2110, 0xffffffffffffffff)
mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000))
lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'ramfs\x00'}, &(0x7f0000000240)='ramfs\x00', 0x6, 0x2)
clock_gettime(0x0, &(0x7f0000000280))
clock_gettime(0x0, &(0x7f00000002c0))
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10)
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x3, 0x1000})
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x300000000000000)

[ 2396.821504] input: syz1 as /devices/virtual/input/input1796
16:57:57 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:57 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:57 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x4, 0x0, 0x6})
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
fdatasync(r0)

16:57:57 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:57 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:57 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:57 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff0000009effffff0000000000"], 0x14}}, 0x0)

[ 2397.248112] input: syz1 as /devices/virtual/input/input1798
16:57:57 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x440000, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000180)={0x90000000})
sendmmsg(r2, &(0x7f00000002c0), 0x0, 0xa00)

[ 2397.349771] input: syz1 as /devices/virtual/input/input1799
16:57:57 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:57 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:57:57 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x0, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2397.528876] syz-executor1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0
16:57:57 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000040)=0xe8)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:57:57 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0xc046, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180))
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0xa00)

[ 2397.590386] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2397.624452] CPU: 0 PID: 1614 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2397.631754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2397.641106] Call Trace:
[ 2397.643701]  dump_stack+0x244/0x39d
[ 2397.647336]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2397.652539]  ? mark_held_locks+0x130/0x130
[ 2397.656787]  ? mark_held_locks+0x130/0x130
[ 2397.661172]  dump_header+0x27b/0xf72
[ 2397.664905]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2397.670465]  ? check_preemption_disabled+0x48/0x280
[ 2397.675487]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2397.681030]  ? pagefault_out_of_memory+0x197/0x197
[ 2397.685997]  ? debug_smp_processor_id+0x1c/0x20
[ 2397.690687]  ? perf_trace_lock+0x14d/0x7a0
[ 2397.694927]  ? debug_smp_processor_id+0x1c/0x20
[ 2397.699598]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2397.704535]  ? lock_is_held_type+0x210/0x210
[ 2397.708952]  ? perf_trace_lock+0x7a0/0x7a0
[ 2397.713210]  ? debug_smp_processor_id+0x1c/0x20
[ 2397.717914]  ? perf_trace_lock+0x14d/0x7a0
[ 2397.722153]  ? zap_class+0x640/0x640
[ 2397.725902]  ? print_usage_bug+0xc0/0xc0
[ 2397.729982]  ? lock_is_held_type+0x210/0x210
[ 2397.734419]  ? find_held_lock+0x36/0x1c0
[ 2397.738494]  ? mark_held_locks+0xc7/0x130
[ 2397.742677]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2397.747786]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2397.752910]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2397.757507]  ? trace_hardirqs_on+0xbd/0x310
[ 2397.761847]  ? kasan_check_read+0x11/0x20
[ 2397.766010]  ? ___ratelimit+0x3b4/0x672
[ 2397.770005]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2397.775129]  ? trace_hardirqs_on+0x310/0x310
[ 2397.779540]  ? lock_downgrade+0x900/0x900
[ 2397.783705]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2397.788837]  ? ___ratelimit+0x3b9/0x672
[ 2397.792833]  ? idr_get_free+0xf70/0xf70
[ 2397.796819]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2397.801316]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2397.805838]  oom_kill_process.cold.27+0x10/0x903
[ 2397.810600]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2397.815099]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2397.819711]  ? oom_evaluate_task+0x540/0x540
[ 2397.824119]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2397.829681]  ? cgroup_procs_next+0x70/0x70
[ 2397.833920]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2397.838422]  ? oom_badness+0xaa0/0xaa0
[ 2397.842329]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2397.847095]  ? mem_cgroup_iter_break+0x30/0x30
[ 2397.851697]  ? mark_held_locks+0xc7/0x130
[ 2397.855881]  out_of_memory+0xa84/0x1430
[ 2397.859904]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2397.864510]  ? preempt_schedule+0x4d/0x60
[ 2397.868719]  ? oom_killer_disable+0x3a0/0x3a0
[ 2397.873217]  ? preempt_schedule+0x4d/0x60
[ 2397.877371]  ? ___preempt_schedule+0x16/0x18
[ 2397.881821]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2397.886688]  ? memory_oom_group_write+0x160/0x160
[ 2397.891530]  ? memcg_kmem_charge_memcg+0x7c/0x120
[ 2397.896389]  ? page_counter_try_charge+0x1c1/0x220
[ 2397.901343]  try_charge+0xda9/0x1700
[ 2397.905076]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2397.909751]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2397.914683]  ? kasan_check_read+0x11/0x20
[ 2397.918885]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2397.924164]  ? rcu_softirq_qs+0x20/0x20
[ 2397.928204]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2397.933765]  ? lock_page_memcg+0x350/0x350
[ 2397.938034]  ? lock_acquire+0x1ed/0x520
[ 2397.942043]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2397.947443]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2397.952989]  ? check_preemption_disabled+0x48/0x280
[ 2397.958029]  memcg_kmem_charge_memcg+0x7c/0x120
[ 2397.962714]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 2397.967216]  ? debug_smp_processor_id+0x1c/0x20
[ 2397.971899]  memcg_kmem_charge+0x149/0x350
[ 2397.976153]  __alloc_pages_nodemask+0x75e/0xea0
[ 2397.980843]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[ 2397.985911]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2397.991451]  ? check_preemption_disabled+0x48/0x280
[ 2397.996479]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2398.002023]  ? zap_class+0x640/0x640
[ 2398.005778]  ? __lock_is_held+0xb5/0x140
[ 2398.009851]  ? lock_downgrade+0x900/0x900
[ 2398.014003]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2398.019578]  alloc_pages_current+0x173/0x350
[ 2398.024001]  pte_alloc_one+0x1b/0x1a0
[ 2398.027821]  __pte_alloc+0x2a/0x350
[ 2398.031461]  copy_page_range+0x2017/0x2ee0
[ 2398.035790]  ? __pmd_alloc+0x450/0x450
[ 2398.039694]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2398.044551]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2398.049447]  ? __save_stack_trace+0x8d/0xf0
[ 2398.053776]  ? rb_insert_color_cached+0x14b0/0x14b0
[ 2398.058858]  ? check_preemption_disabled+0x48/0x280
[ 2398.063888]  ? debug_smp_processor_id+0x1c/0x20
[ 2398.068573]  ? debug_smp_processor_id+0x1c/0x20
[ 2398.073261]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2398.078215]  ? lock_is_held_type+0x210/0x210
[ 2398.082671]  ? zap_class+0x640/0x640
[ 2398.086387]  ? lock_downgrade+0x900/0x900
[ 2398.090545]  ? zap_class+0x640/0x640
[ 2398.094267]  ? zap_class+0x640/0x640
[ 2398.097990]  ? find_held_lock+0x36/0x1c0
[ 2398.102066]  ? copy_process+0x4413/0x87a0
[ 2398.106219]  ? lock_downgrade+0x900/0x900
[ 2398.110375]  ? lock_release+0xa00/0xa00
[ 2398.114368]  ? perf_trace_sched_process_exec+0x860/0x860
[ 2398.119872]  ? dup_userfaultfd+0x6d8/0x890
[ 2398.124168]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2398.129218]  ? vma_compute_subtree_gap+0x160/0x240
[ 2398.134187]  ? validate_mm_rb+0xaa/0xc0
[ 2398.138250]  ? __vma_link_rb+0x26c/0x370
[ 2398.142366]  copy_process+0x45e9/0x87a0
[ 2398.146399]  ? __cleanup_sighand+0x70/0x70
[ 2398.150669]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2398.156214]  ? check_preemption_disabled+0x48/0x280
[ 2398.161232]  ? find_held_lock+0x36/0x1c0
[ 2398.165304]  ? perf_trace_lock+0x14d/0x7a0
[ 2398.169542]  ? try_to_wake_up+0x11c/0x1490
[ 2398.173784]  ? lock_is_held_type+0x210/0x210
[ 2398.178222]  ? trace_hardirqs_off+0xb8/0x310
[ 2398.182661]  ? kasan_check_read+0x11/0x20
[ 2398.186826]  ? zap_class+0x640/0x640
[ 2398.190545]  ? lock_pin_lock+0x350/0x350
[ 2398.194621]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2398.200173]  ? find_held_lock+0x36/0x1c0
[ 2398.204284]  ? do_wp_page+0x127c/0x2920
[ 2398.208269]  ? lock_downgrade+0x900/0x900
[ 2398.212420]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2398.216744]  ? perf_trace_lock+0x7a0/0x7a0
[ 2398.220982]  ? kasan_check_read+0x11/0x20
[ 2398.225132]  ? do_raw_spin_unlock+0xa7/0x330
[ 2398.229540]  ? do_raw_spin_trylock+0x270/0x270
[ 2398.234120]  ? pgd_free+0x380/0x380
[ 2398.237763]  ? _raw_spin_unlock+0x2c/0x50
[ 2398.241916]  ? do_wp_page+0x528/0x2920
[ 2398.245836]  ? find_held_lock+0x36/0x1c0
[ 2398.249942]  ? finish_mkwrite_fault+0x650/0x650
[ 2398.254619]  ? __lock_acquire+0x62f/0x4c20
[ 2398.258877]  ? mark_held_locks+0x130/0x130
[ 2398.263112]  ? lock_downgrade+0x900/0x900
[ 2398.267284]  ? __lock_acquire+0x62f/0x4c20
[ 2398.271536]  ? __lock_acquire+0x62f/0x4c20
[ 2398.275787]  ? perf_trace_lock+0x14d/0x7a0
[ 2398.280036]  ? debug_smp_processor_id+0x1c/0x20
[ 2398.284724]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2398.289671]  ? mark_held_locks+0x130/0x130
[ 2398.293907]  ? perf_trace_lock+0x14d/0x7a0
[ 2398.298157]  ? debug_smp_processor_id+0x1c/0x20
[ 2398.302849]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2398.308390]  ? check_preemption_disabled+0x48/0x280
[ 2398.313885]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2398.319426]  ? check_preemption_disabled+0x48/0x280
[ 2398.324451]  ? __lock_is_held+0xb5/0x140
[ 2398.328519]  ? print_usage_bug+0xc0/0xc0
[ 2398.332598]  ? print_usage_bug+0xc0/0xc0
[ 2398.336659]  ? find_held_lock+0x36/0x1c0
[ 2398.340743]  ? __lock_acquire+0x62f/0x4c20
[ 2398.344976]  ? zap_class+0x640/0x640
[ 2398.348722]  ? ktime_get_coarse_real_ts64+0x273/0x370
[ 2398.353957]  ? mark_held_locks+0x130/0x130
[ 2398.358204]  ? lock_acquire+0x1ed/0x520
[ 2398.362200]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2398.366792]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2398.372342]  ? check_preemption_disabled+0x48/0x280
16:57:58 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x0, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2398.377394]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2398.382988]  ? check_preemption_disabled+0x48/0x280
[ 2398.388008]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2398.393591]  ? debug_smp_processor_id+0x1c/0x20
[ 2398.398266]  ? perf_trace_lock+0x14d/0x7a0
[ 2398.402503]  ? debug_smp_processor_id+0x1c/0x20
[ 2398.407203]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2398.412152]  ? lock_is_held_type+0x210/0x210
[ 2398.416567]  ? perf_trace_lock+0x7a0/0x7a0
[ 2398.420857]  ? zap_class+0x640/0x640
[ 2398.424591]  ? zap_class+0x640/0x640
[ 2398.428354]  ? lock_is_held_type+0x210/0x210
[ 2398.432789]  ? perf_trace_lock+0x7a0/0x7a0
[ 2398.437051]  ? find_held_lock+0x36/0x1c0
[ 2398.441161]  _do_fork+0x1cb/0x11d0
[ 2398.444725]  ? fork_idle+0x1d0/0x1d0
[ 2398.448444]  ? __do_page_fault+0x620/0xe60
[ 2398.452693]  ? kasan_check_read+0x11/0x20
[ 2398.456845]  ? _copy_to_user+0xc8/0x110
[ 2398.460837]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2398.466388]  ? put_old_timespec32+0x110/0x280
[ 2398.470919]  ? get_old_timespec32+0x2a0/0x2a0
[ 2398.475417]  ? do_fast_syscall_32+0x150/0xfb2
[ 2398.479914]  ? do_fast_syscall_32+0x150/0xfb2
[ 2398.484440]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2398.489041]  ? trace_hardirqs_on+0xbd/0x310
[ 2398.493360]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2398.498895]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2398.503481]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2398.508632]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2398.514184]  __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2398.519243]  do_fast_syscall_32+0x34d/0xfb2
[ 2398.523629]  ? do_int80_syscall_32+0x890/0x890
[ 2398.528216]  ? entry_SYSENTER_compat+0x68/0x7f
[ 2398.532826]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2398.537853]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2398.542725]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2398.547586]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2398.552609]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2398.557650]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2398.562504]  entry_SYSENTER_compat+0x70/0x7f
[ 2398.566944] RIP: 0023:0xf7fb2a29
[ 2398.570327] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 2398.589251] RSP: 002b:000000000845fd70 EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[ 2398.596962] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000
[ 2398.604232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000895a968
[ 2398.611501] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2398.618766] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2398.626047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:57:59 executing program 3:
r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5c, 0x2000)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000140)={0x0, 0x401, 0xff})
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0x4, 0x6, 0x0, 0x6, 0x10001, 0x4})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0)
ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000040)={0x78, 0x7fff, 0x8})
syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x7926, 0x40800)

[ 2398.728473] input: syz1 as /devices/virtual/input/input1800
[ 2398.782781] Task in /syz1 killed as a result of limit of /syz1
[ 2398.788839] memory: usage 307200kB, limit 307200kB, failcnt 259
[ 2398.810188] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2398.823320] input: syz1 as /devices/virtual/input/input1801
16:57:59 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000300))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0xa00)

16:57:59 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x0, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2398.840467] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2398.867664] Memory cgroup stats for /syz1: cache:16KB rss:273592KB rss_huge:256000KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:273828KB inactive_file:0KB active_file:0KB unevictable:0KB
16:57:59 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff0000007fffffff0000000000"], 0x14}}, 0x0)

16:57:59 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"])
r3 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x2, 0x2)
sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443)
sendmsg$alg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="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", 0x1000}], 0x1, &(0x7f0000000100)=[@iv={0x54, 0x117, 0x2, 0x42, "6e2eb3341670e92ba1aeb1c044c75936458183a4bf5190716bf98e10f458a404db2d3d786de72f65096792d613e42157adaba8a69b60c4bdb9453d8e8a104c842d88"}], 0x54, 0x800}, 0x40010)
bind$rds(r3, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10)

16:57:59 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:57:59 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x0, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2399.141357] input: syz1 as /devices/virtual/input/input1802
[ 2399.237333] input: syz1 as /devices/virtual/input/input1803
[ 2399.743404] Memory cgroup out of memory: Kill process 22791 (syz-executor1) score 1106 or sacrifice child
[ 2399.790493] Killed process 22791 (syz-executor1) total-vm:70252kB, anon-rss:2216kB, file-rss:33464kB, shmem-rss:0kB
16:58:00 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:00 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
fstat(r0, &(0x7f0000000280))
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x10000)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x400, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={<r3=>0x0, @in6={{0xa, 0x4e21, 0x3, @local}}, [0x8001, 0x694f, 0x9a5, 0x2, 0xdbb, 0xff, 0x6, 0x7, 0x3ff, 0xfffffffffffeffff, 0x6, 0xf7ce, 0x7ff, 0x1359, 0xffffffffffff7fff]}, &(0x7f0000000300)=0x100)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r3, 0x5, 0x5b}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x400000000000027, 0xa00)

16:58:00 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x400000, 0x101)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000001580)={<r3=>0x0, 0x6}, &(0x7f00000015c0)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001600)={r3, @in6={{0xa, 0x4e24, 0x0, @remote, 0xa4a6}}, [0x480f, 0x200, 0xe29, 0x1, 0x7, 0x2840, 0xffffffff, 0x0, 0x2, 0x5, 0x6, 0x7f, 0x2, 0x9, 0xff]}, &(0x7f0000001700)=0x100)
sendto$unix(r2, &(0x7f0000001800)="1cb818d128a78dc450b962001e30b3eb957b51c8455845c283fbdcea96c9673958cd18ccb1cf127781a45bb8a06f79de52e643c10c2e2e82d766ceeafc658c9b6acb9eb66e5e12554d7dac234055179e6d20e10c27e2357cbe259ca58760d82151fe6c97d9dd02819df76baf22bf20cd69362a3e6a948972e0bd5f", 0x7b, 0x40000, 0x0, 0x0)
mmap$binder(&(0x7f000022b000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4000)
write$P9_RREAD(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="2c000000750209212100007458f0ee6d9d135180a16b38e36fbc6231c12bb95f7258ba14f3e01411367199771e421711f3599305"], 0x2c)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001480)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, <r6=>0x0}, &(0x7f00000017c0)=0xc)
setsockopt$sock_int(r0, 0x1, 0x1f, &(0x7f0000000340)=0x2, 0x4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, <r7=>0x0}, &(0x7f00000002c0)=0xc)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9)
setresuid(r5, r6, r7)
sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000400)=@generic={0x3, "dfb643ef1bdf412da010d4c6963f2a772df25c6bb650a3c4421cc6a60f1403e4e25201ae6e7db85f113e67301c1c6591c1a4d0c8b70ca25500b26f28153080c8be2fd86e088390e0dae11248b427016c0d2dc3e0b6498eb11b213f5dfcae56d640a94000f4615e71f4e65f818bd6ab07f64c7a953ee0e707d919e3e7326b"}, 0x80, &(0x7f0000000300), 0x4, &(0x7f0000000340), 0x7c, 0x20000810}, 0x0)
r8 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xe49, 0xa200)
ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000001780)={0x6da7, 0x0, 0x3ff, 0x2, 0x5, 0x5, 0xd2b, 0x7ff, 0x7f, 0x6, 0x7, 0x4})
open$dir(&(0x7f0000001740)='./file0\x00', 0x200, 0x43)
fallocate(r0, 0x0, 0x5, 0x3f)
ioctl$RTC_EPOCH_READ(r4, 0x8004700d, &(0x7f00000001c0))
ioctl$RTC_ALM_SET(r8, 0x40247007, &(0x7f0000000040)={0x28, 0x1d, 0x17, 0x1d, 0x2, 0x2, 0x3, 0xa7, 0x1})
getsockname$inet(r4, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10)
getrandom(&(0x7f0000000480)=""/4096, 0x1000, 0x2)

16:58:00 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x0, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:00 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:58:00 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000ffffff9e0000000000"], 0x14}}, 0x0)

[ 2399.928162] input: syz1 as /devices/virtual/input/input1804
16:58:00 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x0, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:00 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x0, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:00 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3000, 0x1})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x40, 0x0)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000140))
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0)
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040))
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0xfffffffffffffff7, @remote, 0x5}, @in6={0xa, 0x4e21, 0x2, @loopback, 0x1d9}, @in6={0xa, 0x4e21, 0x8, @loopback, 0xffffffffffffffa3}], 0x54)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYRES32=r0])
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:58:00 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000000030000000000"], 0x14}}, 0x0)

[ 2400.505686] input: syz1 as /devices/virtual/input/input1806
16:58:00 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:01 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x0, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:01 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x0, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:01 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:01 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x0, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:01 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x400, 0xd0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={<r2=>0x0, 0xe2, "88bffe862df5044ea779f6ebf120413ad4b5b64fec70fa5e4eb3de76a98fe29940005b439cb0dc6b20ee4e49acd5707953ef33d8b0eda1a0f9e15d011c280bceced897ada9618471e472116b47488e03c2678b462139a38fa32470733b640e5421137c18e810c7993adda825b044320357fa1eeed4ee1c5b82dc371ac646abf6b38ab966f972cc7907fc857f5479687f9cbd2f1f8b382b9a7d5d75924837ba3ffee8d6900a40bfcd2abb140f1528e1ad507da78881d334532bd5f3017f40f1b5bff801f5f83432f7bb6a8086dbdebb857d4a1a3524d296fa49e52cc4fab3a9aeadf9"}, &(0x7f0000000100)=0xea)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000440)={r2, 0xcf, "58ae86dfded0f4bb4a79381cf3262cbff6c7ac812692ef39df228b66eab4a3d79bec3835320ac9863545fb05259792e216757829411244c84c7d28d1690a38d3ad83ba55b5f6b6ae135e03811288a989d4c5ebd83a7a0a9a1a47081c49fd4d2296e30e74208a2941d8ece32c90a87ebea00a3389d49a3b130c12bd33a15587fb03b40f075c8e65712e14241d61257290f6b11addfabec9d778bc4078427e2eeb7f30a0ced4a401077ee85e739c6b70fa3c7d1900e03a88127d0b169b269eabb233abb55ab9292727a9de24b187ddcf"}, &(0x7f0000000140)=0xd7)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
creat(&(0x7f0000000040)='./file0\x00', 0x11)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000))

16:58:01 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x0, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:01 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000000100000000000"], 0x14}}, 0x0)

16:58:01 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e798"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:01 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x0, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:01 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e798"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:01 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0x0, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2401.419186] input: syz1 as /devices/virtual/input/input1808
16:58:01 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000a00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000100)=""/195)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000000)={0x7, 0x3})
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x3, 0x3})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvfrom$inet6(r2, &(0x7f0000000bc0)=""/4096, 0x1000, 0x20, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={[], [], @broadcast}, 0x4}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0)
r5 = dup2(r4, r2)
sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000280)=[@rights={0x18, 0x1, 0x1, [r5, r1, r3]}], 0x18}, 0x0)
socket$bt_rfcomm(0x1f, 0x1, 0x3)
recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}], 0x1, 0x0, 0x0)

16:58:01 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0x0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:01 executing program 5:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:58:01 executing program 0:
r0 = socket(0x2, 0x1, 0x800)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="92f25a3e78a2fe1a3761abb94110b79a2a46cbc43b311ed1741ce519b494672adb1fcfdc958c24f97a756e8f5d4acd059e3f852ef09fd66aae47a566a60e919afb3642deda55238e2cb70626657b8e686d9602dda89f773906559ef1388186fccdeefdd4141e749cea41b5a14baf21989b3970e5aa42a2ffb50001f6a46c2018d3ca43f4d46142589949ea49624545a43c44e1bb411df77094c49dac3ed1640a3b166be5f504c32d302a73e56c51a96410b684481518ad8b", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf251000000024000300080008000000000008000500e0000002080007004e21000008000400080000000800040021070000"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
r2 = dup3(r0, r0, 0x80000)
getsockopt$inet_tcp_buf(r0, 0x6, 0x7, &(0x7f0000000000)=""/58, &(0x7f0000000100)=0xffffffffffffff66)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x2, 0x0)
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x8)
socket$nl_generic(0x10, 0x3, 0x10)

16:58:02 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:02 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0))
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x3, 0x2, 0x7}, 0x10)

16:58:02 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0x0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2401.875314] input: syz1 as /devices/virtual/input/input1810
[ 2401.952931] input: syz1 as /devices/virtual/input/input1811
16:58:02 executing program 0:
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, 0x0, 0x0)
getuid()
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x300000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x8000001d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da05, 0x0, 0xfffff000}}, 0x14}}, 0x0)
setsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f00000000c0)=0x1, 0x4)
r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x81dc, 0x8000)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil})

16:58:02 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff00000000000000ffffff9e00"], 0x14}}, 0x0)

16:58:02 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:02 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x0, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:02 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/241, 0xf1}], 0x1)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
mount(&(0x7f0000000100)=@sg0='/dev/sg0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x80, &(0x7f00000002c0)='eth0()$\x00')
syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x20000)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}, 0x45c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={<r1=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000000)="af2b6d643573756d2b76626f786e657431287b00", 0xffffffffffffffff}, 0x30)
syz_open_procfs(r1, &(0x7f00000000c0)='mountstats\x00')

[ 2402.233980] input: syz1 as /devices/virtual/input/input1812
16:58:02 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:02 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:02 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x0, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:02 executing program 0:
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, 0x0, 0x0)
getuid()
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x300000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x8000001d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da05, 0x0, 0xfffff000}}, 0x14}}, 0x0)
setsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f00000000c0)=0x1, 0x4)
r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x81dc, 0x8000)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil})

16:58:02 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000c00e00000000000000"], 0x14}}, 0x0)

16:58:02 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
fcntl$getown(r0, 0x9)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040), 0x4)

[ 2402.541767] input: syz1 as /devices/virtual/input/input1814
16:58:02 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000010004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000100)={0x0, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x3})
mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x3, 0x2)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x3})
write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000000ff"], 0x1200e)
r3 = dup2(r2, r1)
pipe(&(0x7f0000000180))
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e22, 0x101, @dev={0xfe, 0x80, [], 0x20}, 0x1e5e75f0}}, 0x5, 0x0, 0x9cc, 0x3, 0x21}, &(0x7f00000001c0)=0x98)
ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000140)={0x4ea1, 0x401, 0x100, 0x0, 0xa1c, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x7})
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000340)={0x78, 0x5, 0x0, "ee7ec94e8921ca9a2630b4aabfeb1f480a8b193c5926afed595ecb12036400bb948a00bd6b4f15cd930f4397c0d4d34ecc7b5718c4135b915265f03892b5be7c278bf581aac9a02148a7472d0f184ac4eef9f6cb08fa637823c930b50003b9e83d5d03201b3968e15f0a7e223d1777f6ef351c539c0efe49"})
write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4)

16:58:02 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x0, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:02 executing program 0:
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, 0x0, 0x0)
getuid()
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x300000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x8000001d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da05, 0x0, 0xfffff000}}, 0x14}}, 0x0)
setsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f00000000c0)=0x1, 0x4)
r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x81dc, 0x8000)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil})

16:58:03 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:03 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x20000803, 0x0)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0x2b9, "4ebd6b2c0ffc336a74f79712f08bb9dadd1412dd2d548a3a159c05f3ceb96e90", 0x1, 0x1})
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100))
ftruncate(r0, 0x9)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x2, 0x401, 0x87})
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x40000, 0x0)
getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
tee(r0, r0, 0x58f20e63, 0x2)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:58:03 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x0, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:03 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2402.871952] input: syz1 as /devices/virtual/input/input1816
16:58:03 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000")
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4)
fstatfs(r0, &(0x7f0000000280)=""/199)

16:58:03 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000341100000000000000"], 0x14}}, 0x0)

16:58:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000014000)={&(0x7f00000000c0)={0x1c, 0x1d, 0x2ff, 0x0, 0x0, {0x7}, [@typed={0x8, 0x4c, @pid}]}, 0x1c}}, 0x0)
lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

[ 2403.002278] input: syz1 as /devices/virtual/input/input1817
16:58:03 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x0, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:03 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x401, 0x440040)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'memory'}, {0x2f, 'memory'}, {0x2d, 'rdma'}, {0x0, 'cpu'}, {0x2d, 'pids'}, {0x2f, 'pids'}]}, 0x2d)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:58:03 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7a"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:03 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @broadcast}, 0x10)

16:58:03 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r0)
r1 = memfd_create(&(0x7f0000000300), 0x0)
write(r1, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000000001, 0x11, r1, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)

16:58:03 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x0, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2403.309214] input: syz1 as /devices/virtual/input/input1818
16:58:03 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7a"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:03 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x4, 0x0, 0x0}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000000), 0x0}, 0x18)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

16:58:03 executing program 0:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
seccomp(0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x8000000000000, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, 0x0)
socket$alg(0x26, 0x5, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612)
pipe(&(0x7f0000000240))
socket(0x10, 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00')
sendfile(0xffffffffffffffff, r6, 0x0, 0x0)
memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x0)

16:58:03 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000000)={0x0, 0x0, [0x3, 0xb032, 0x800, 0x3]})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x400000000000, 0x0, 0x4, 0x5]})
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x12)
r2 = getpgrp(0x0)
sched_setscheduler(r2, 0x7, &(0x7f0000000280)=0x3ff)
getsockopt$inet_int(r1, 0x0, 0x21, &(0x7f00000000c0), &(0x7f0000000300)=0x4)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c)

16:58:03 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff00000000000000ffffff8800"], 0x14}}, 0x0)

16:58:03 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x0, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2403.609115] kauditd_printk_skb: 59 callbacks suppressed
[ 2403.609128] audit: type=1326 audit(1543424283.876:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30510 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fb6a29 code=0x0
[ 2403.648243] input: syz1 as /devices/virtual/input/input1820
[ 2403.659010] syz-executor1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0
16:58:03 executing program 3:
r0 = creat(0x0, 0x104)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0)
syncfs(r2)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0xfffffffffffffffb, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @rand_addr}, &(0x7f0000000200)=0xc)
sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0xffe0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000700)=@v3={0x3000000, [{0x0, 0xffffffffffffff79}]}, 0x18, 0x0)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000500)=ANY=[], 0x0, &(0x7f00000002c0)='cramfs\x00', 0x0, 0x0)
capset(&(0x7f00002d0ff8), 0x0)
stat(0x0, 0x0)
ioctl$EVIOCGPHYS(r0, 0x80404507, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000600), &(0x7f00000006c0)=0x68)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)

[ 2403.700197] QAT: Invalid ioctl
[ 2403.726750] QAT: Invalid ioctl
[ 2403.748769] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2403.761249] CPU: 1 PID: 1614 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2403.768543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2403.777896] Call Trace:
[ 2403.780492]  dump_stack+0x244/0x39d
[ 2403.784130]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2403.789332]  ? mark_held_locks+0x130/0x130
[ 2403.793583]  ? mark_held_locks+0x130/0x130
[ 2403.797828]  dump_header+0x27b/0xf72
[ 2403.801551]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2403.807095]  ? check_preemption_disabled+0x48/0x280
[ 2403.812110]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2403.817666]  ? pagefault_out_of_memory+0x197/0x197
[ 2403.822597]  ? debug_smp_processor_id+0x1c/0x20
[ 2403.827278]  ? perf_trace_lock+0x14d/0x7a0
[ 2403.831515]  ? debug_smp_processor_id+0x1c/0x20
[ 2403.836196]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2403.841134]  ? lock_is_held_type+0x210/0x210
[ 2403.845549]  ? perf_trace_lock+0x7a0/0x7a0
[ 2403.849791]  ? debug_smp_processor_id+0x1c/0x20
[ 2403.854534]  ? perf_trace_lock+0x14d/0x7a0
[ 2403.858796]  ? zap_class+0x640/0x640
[ 2403.862578]  ? print_usage_bug+0xc0/0xc0
[ 2403.866644]  ? lock_is_held_type+0x210/0x210
[ 2403.871107]  ? find_held_lock+0x36/0x1c0
[ 2403.875200]  ? mark_held_locks+0xc7/0x130
[ 2403.879361]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2403.884475]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2403.889592]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2403.894192]  ? trace_hardirqs_on+0xbd/0x310
[ 2403.898528]  ? kasan_check_read+0x11/0x20
[ 2403.902689]  ? ___ratelimit+0x3b4/0x672
[ 2403.906678]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2403.911797]  ? trace_hardirqs_on+0x310/0x310
[ 2403.916234]  ? lock_downgrade+0x900/0x900
[ 2403.920416]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2403.925534]  ? ___ratelimit+0x3b9/0x672
[ 2403.929526]  ? idr_get_free+0xf70/0xf70
[ 2403.933510]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2403.938016]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2403.942533]  oom_kill_process.cold.27+0x10/0x903
[ 2403.947305]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2403.951833]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2403.956443]  ? oom_evaluate_task+0x540/0x540
[ 2403.960865]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2403.966493]  ? cgroup_procs_next+0x70/0x70
[ 2403.970762]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2403.975367]  ? oom_badness+0xaa0/0xaa0
[ 2403.979274]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2403.984054]  ? mem_cgroup_iter_break+0x30/0x30
[ 2403.988670]  ? mark_held_locks+0xc7/0x130
[ 2403.992845]  out_of_memory+0xa84/0x1430
[ 2403.996841]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2404.001439]  ? kasan_check_read+0x11/0x20
[ 2404.005624]  ? oom_killer_disable+0x3a0/0x3a0
[ 2404.010170]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2404.015031]  ? memory_oom_group_write+0x160/0x160
[ 2404.019884]  ? memcg_kmem_charge_memcg+0x7c/0x120
[ 2404.024751]  ? page_counter_try_charge+0x1c1/0x220
[ 2404.029714]  try_charge+0xda9/0x1700
[ 2404.033456]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2404.038146]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2404.043087]  ? kasan_check_read+0x11/0x20
[ 2404.047261]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2404.052596]  ? rcu_softirq_qs+0x20/0x20
[ 2404.056603]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2404.062163]  ? lock_page_memcg+0x350/0x350
[ 2404.066418]  ? lock_acquire+0x1ed/0x520
[ 2404.070411]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2404.075795]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2404.081365]  ? check_preemption_disabled+0x48/0x280
[ 2404.086413]  memcg_kmem_charge_memcg+0x7c/0x120
[ 2404.091095]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 2404.095612]  ? debug_smp_processor_id+0x1c/0x20
[ 2404.100303]  memcg_kmem_charge+0x149/0x350
[ 2404.104578]  __alloc_pages_nodemask+0x75e/0xea0
[ 2404.104603]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[ 2404.104622]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2404.104640]  ? check_preemption_disabled+0x48/0x280
[ 2404.104659]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2404.130424]  ? zap_class+0x640/0x640
[ 2404.134179]  ? __lock_is_held+0xb5/0x140
[ 2404.138268]  ? lock_downgrade+0x900/0x900
[ 2404.142462]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
16:58:04 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x0, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2404.148039]  alloc_pages_current+0x173/0x350
[ 2404.152468]  pte_alloc_one+0x1b/0x1a0
[ 2404.156299]  __pte_alloc+0x2a/0x350
[ 2404.159967]  copy_page_range+0x2017/0x2ee0
[ 2404.164272]  ? __pmd_alloc+0x450/0x450
[ 2404.168201]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2404.173057]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2404.177922]  ? __save_stack_trace+0x8d/0xf0
[ 2404.182388]  ? rb_insert_color_cached+0x14b0/0x14b0
[ 2404.187420]  ? check_preemption_disabled+0x48/0x280
[ 2404.192469]  ? debug_smp_processor_id+0x1c/0x20
[ 2404.197159]  ? debug_smp_processor_id+0x1c/0x20
[ 2404.201850]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2404.206818]  ? lock_is_held_type+0x210/0x210
[ 2404.211289]  ? zap_class+0x640/0x640
[ 2404.215035]  ? lock_downgrade+0x900/0x900
[ 2404.219195]  ? zap_class+0x640/0x640
[ 2404.222959]  ? zap_class+0x640/0x640
[ 2404.226695]  ? find_held_lock+0x36/0x1c0
[ 2404.230814]  ? copy_process+0x4413/0x87a0
[ 2404.234998]  ? lock_downgrade+0x900/0x900
[ 2404.239188]  ? lock_release+0xa00/0xa00
[ 2404.243174]  ? perf_trace_sched_process_exec+0x860/0x860
[ 2404.248640]  ? dup_userfaultfd+0x6d8/0x890
[ 2404.252901]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2404.257928]  ? vma_compute_subtree_gap+0x160/0x240
[ 2404.262889]  ? validate_mm_rb+0xaa/0xc0
[ 2404.266890]  ? __vma_link_rb+0x26c/0x370
[ 2404.270977]  copy_process+0x45e9/0x87a0
[ 2404.275025]  ? __cleanup_sighand+0x70/0x70
[ 2404.279270]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2404.284825]  ? check_preemption_disabled+0x48/0x280
[ 2404.289865]  ? zap_class+0x640/0x640
[ 2404.293593]  ? perf_trace_lock+0x14d/0x7a0
[ 2404.297851]  ? lock_is_held_type+0x210/0x210
[ 2404.302281]  ? __lock_is_held+0xb5/0x140
[ 2404.306362]  ? zap_class+0x640/0x640
[ 2404.310078]  ? __lock_acquire+0x62f/0x4c20
[ 2404.314465]  ? __account_cfs_rq_runtime+0x790/0x790
[ 2404.319508]  ? find_held_lock+0x36/0x1c0
[ 2404.323596]  ? do_wp_page+0x127c/0x2920
[ 2404.327580]  ? lock_downgrade+0x900/0x900
[ 2404.331749]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2404.336089]  ? kasan_check_read+0x11/0x20
[ 2404.340245]  ? do_raw_spin_unlock+0xa7/0x330
[ 2404.344659]  ? do_raw_spin_trylock+0x270/0x270
[ 2404.349246]  ? pgd_free+0x380/0x380
[ 2404.352877]  ? lock_is_held_type+0x210/0x210
[ 2404.357328]  ? _raw_spin_unlock+0x2c/0x50
[ 2404.361512]  ? do_wp_page+0x528/0x2920
[ 2404.365420]  ? finish_mkwrite_fault+0x650/0x650
[ 2404.370096]  ? __lock_acquire+0x62f/0x4c20
[ 2404.374346]  ? mark_held_locks+0x130/0x130
[ 2404.378641]  ? find_held_lock+0x36/0x1c0
[ 2404.382727]  ? __lock_acquire+0x62f/0x4c20
[ 2404.386975]  ? __lock_acquire+0x62f/0x4c20
[ 2404.391239]  ? perf_trace_lock+0x14d/0x7a0
[ 2404.395488]  ? debug_smp_processor_id+0x1c/0x20
[ 2404.400169]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2404.405112]  ? trace_hardirqs_on+0xbd/0x310
[ 2404.409468]  ? mark_held_locks+0x130/0x130
[ 2404.413718]  ? perf_trace_lock+0x14d/0x7a0
[ 2404.417995]  ? debug_smp_processor_id+0x1c/0x20
[ 2404.422681]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2404.428233]  ? check_preemption_disabled+0x48/0x280
[ 2404.433331]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2404.438885]  ? check_preemption_disabled+0x48/0x280
[ 2404.444431]  ? __lock_is_held+0xb5/0x140
[ 2404.449553]  ? print_usage_bug+0xc0/0xc0
[ 2404.453655]  ? print_usage_bug+0xc0/0xc0
[ 2404.457746]  ? find_held_lock+0x36/0x1c0
[ 2404.461885]  ? __lock_acquire+0x62f/0x4c20
[ 2404.466147]  ? zap_class+0x640/0x640
[ 2404.469882]  ? ktime_get_coarse_real_ts64+0x273/0x370
[ 2404.475100]  ? mark_held_locks+0x130/0x130
[ 2404.479363]  ? lock_acquire+0x1ed/0x520
[ 2404.483362]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2404.487958]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2404.493538]  ? check_preemption_disabled+0x48/0x280
[ 2404.498564]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2404.504113]  ? check_preemption_disabled+0x48/0x280
[ 2404.509143]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2404.514699]  ? debug_smp_processor_id+0x1c/0x20
[ 2404.519380]  ? perf_trace_lock+0x14d/0x7a0
[ 2404.523624]  ? debug_smp_processor_id+0x1c/0x20
[ 2404.528303]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2404.533275]  ? lock_is_held_type+0x210/0x210
[ 2404.537699]  ? perf_trace_lock+0x7a0/0x7a0
[ 2404.541946]  ? zap_class+0x640/0x640
[ 2404.545701]  ? zap_class+0x640/0x640
16:58:04 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x0, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2404.549426]  ? lock_is_held_type+0x210/0x210
[ 2404.553878]  ? perf_trace_lock+0x7a0/0x7a0
[ 2404.558140]  ? find_held_lock+0x36/0x1c0
[ 2404.562233]  _do_fork+0x1cb/0x11d0
[ 2404.565818]  ? fork_idle+0x1d0/0x1d0
[ 2404.569543]  ? __do_page_fault+0x620/0xe60
[ 2404.571900] audit: type=1326 audit(1543424284.676:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30510 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fb6a29 code=0x0
[ 2404.573834]  ? kasan_check_read+0x11/0x20
[ 2404.573851]  ? _copy_to_user+0xc8/0x110
[ 2404.573871]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2404.573890]  ? put_old_timespec32+0x110/0x280
[ 2404.608646]  ? get_old_timespec32+0x2a0/0x2a0
[ 2404.617619]  ? do_fast_syscall_32+0x150/0xfb2
[ 2404.622119]  ? do_fast_syscall_32+0x150/0xfb2
[ 2404.626626]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2404.631235]  ? trace_hardirqs_on+0xbd/0x310
[ 2404.635572]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2404.641138]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2404.645746]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2404.650859]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2404.656435]  __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2404.661467]  do_fast_syscall_32+0x34d/0xfb2
[ 2404.665817]  ? do_int80_syscall_32+0x890/0x890
[ 2404.670422]  ? entry_SYSENTER_compat+0x68/0x7f
[ 2404.675020]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2404.680047]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2404.684948]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2404.689814]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2404.694856]  ? prepare_exit_to_usermode+0x291/0x3b0
16:58:05 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x0, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2404.699907]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2404.704771]  entry_SYSENTER_compat+0x70/0x7f
[ 2404.709196] RIP: 0023:0xf7fb2a29
[ 2404.712566] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 2404.731470] RSP: 002b:000000000845fd70 EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[ 2404.739188] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000
16:58:05 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000000000000113400"], 0x14}}, 0x0)

16:58:05 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400000, 0x0)
truncate(&(0x7f00000002c0)='./bus\x00', 0x100a00)
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9})
syz_genetlink_get_family_id$ipvs(0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
truncate(&(0x7f0000000180)='./bus\x00', 0x4)

[ 2404.746459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000895a968
[ 2404.753733] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2404.761043] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2404.768365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2404.792448] QAT: Invalid ioctl
[ 2404.795935] QAT: Invalid ioctl
[ 2404.956097] Task in /syz1 killed as a result of limit of /syz1
[ 2404.962351] memory: usage 307200kB, limit 307200kB, failcnt 327
[ 2404.968612] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2404.983203] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2404.989362] Memory cgroup stats for /syz1: cache:16KB rss:272460KB rss_huge:253952KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:272624KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 2405.017539] Memory cgroup out of memory: Kill process 23641 (syz-executor1) score 1106 or sacrifice child
[ 2405.028874] Killed process 23649 (syz-executor1) total-vm:70120kB, anon-rss:2204kB, file-rss:32768kB, shmem-rss:0kB
16:58:05 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7a"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:05 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x0, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:05 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)="000000785aff48104c725f38250000c4709e2cf363bd875ab0fc2e5333e4b19e0b249f5b9098d6107ee9869d4f1d0d79f2166e63e5c9b798fd2507944b9229dc", 0x4)
fstatfs(r0, &(0x7f0000000000)=""/187)

16:58:05 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
getresuid(&(0x7f00000000c0), &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140))
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x4e21, 0x100000000000, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x3a, r2, r3}, {0x8000, 0x5, 0x1, 0x7, 0x8000, 0x80, 0x1, 0xff}, {0x4, 0x10001, 0x9, 0x2}, 0x9, 0x6e6bb0, 0x2, 0x0, 0x1, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x3, 0xfff, 0xb, 0xfffffffffffffffd, 0x7}}, 0xe8)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:58:05 executing program 3:
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000340)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006cf3b85dc08329b000000000000000000000000000000000000000000000cb6c09"], 0x1)

16:58:05 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000011340000000000"], 0x14}}, 0x0)

[ 2405.151611] input: syz1 as /devices/virtual/input/input1822
[ 2405.208581] input: syz1 as /devices/virtual/input/input1823
16:58:05 executing program 0:
preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000003d, 0x0)

16:58:05 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000200)='(', 0x1)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400218)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_1\x00', 0x10)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x2)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
splice(r0, 0x0, r1, 0x0, 0x7, 0x0)

16:58:05 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0x4})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x48800)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:58:05 executing program 0:
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdirat(r0, &(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0)
lstat(&(0x7f0000000480)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000500))

16:58:05 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x0, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2405.489410] input: syz1 as /devices/virtual/input/input1824
16:58:05 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:05 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x0, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:05 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7a"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:05 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7a"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:06 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:06 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240), 0x0)
readv(r0, &(0x7f0000000780)=[{&(0x7f0000000280)=""/240, 0x9e}, {&(0x7f00000007c0)=""/137, 0x89}, {&(0x7f0000000500)=""/230, 0xffffffffffffff70}, {&(0x7f0000000000)=""/127, 0x58}, {&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000700)=""/80, 0x50}], 0x8)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x3, 0x8, 0xd, 0x2})
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x1c1341, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80585414, &(0x7f00000012c0)=""/238)

[ 2405.865269] input: syz1 as /devices/virtual/input/input1826
16:58:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000300000000000000"], 0x14}}, 0x0)

16:58:06 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x0, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:06 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x0, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:06 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x0, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:06 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:06 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x0, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:06 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x2)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20000, 0x0)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000100)=""/57)
ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000000c0))

16:58:06 executing program 3:
socket$unix(0x1, 0x4000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x3, &(0x7f0000000300)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f00000003c0), &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="8cfec426d1832dca7f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000000000)=""/195}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x200000000000020c, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xc0ffffff, 0xffffff9f}, [@ldst={0xffffffc5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0xfffffffffffffffc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f0000003f000000]}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2, 0xb}}, 0x20)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000540)={0x10, 0x0, {0x56, 0x0, 0x9, {0xffffffff, 0x7}, {0x80000000, 0x1}, @rumble={0x0, 0x5}}, {0x57, 0x4, 0x4, {0x7, 0x6}, {0x6, 0x9}, @cond=[{0x4, 0xfffffffffffffff9, 0x1, 0x5, 0xa354}, {0x8, 0x6, 0xbcd, 0x7f, 0x1f}]}})
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100))
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e)
r2 = socket$unix(0x1, 0x1, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)

[ 2406.103048] input: syz1 as /devices/virtual/input/input1828
16:58:06 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:06 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x0, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2406.245670] input: syz1 as /devices/virtual/input/input1829
16:58:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup2(r0, r0)
ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000200)={"ca3d143bb998db4de142276fb3b02837ad4cdced25effcdc8de9af5609f8eb740eac231156bfade26395003dc5d4ecb05f096c7ed559217484b5b7f9ea71e708b4236f540b0f141f5cb1c854c0e2adf2ed21d4666fa0de838564d78dc6f84398d272ec8688ce4d419cda4d724ec92b2668c98a371878ee8bcf4229eb609ea6596146f6de17233dedd79754e2d234806cfc94ca5282c88d3eb4ad90f4fa451cb25993c0f0afef305174cf5bb98d3140ead2078c3da7b545292305057849300fe943eab28f18e8c954fd99eaf2d46b3272e99b3656e703a9123fbab89ae65833fe435de2e73a7a71742e2c7069ac651a14c458ef609c47153b47ba89764a35e8fbd24720484e1c3a0d1b7eb02b3b2a0c0e1c37d0c71bd87f7f4a733482ae2c53264fe4ad88a667ffb377b8302cf6c51a50343078e84c87dd7e567f7a19f25a3b178b7ed94914627e1aeefa234756343eeda6f4a89d44abe67fcea3572efbce7347ed2364b341c4c46cb03d6afdf34186ab056890ca2f28458647f1783fabd050d4d628c55826164d02aa43de142c153ff20982de92178808e82f79970ae2d32b25d81dac9d1cc5bc629ff6062a3de58e7ef89f38fd3590ab716f6b40f07d2ade7ebc3711c854139b3a2de63336a2bc157b3aec4fc3459c31de6daa24bde9656df9dd7db6418c022a01001cc16597b682fb431d8e2d59239ce7492477f611fb0b37ce29690c1147fab455704e81c9e8f07d86101cc82e444293e702980415e3766ab0afa9df0a242a6fb901b61d7f41e1e07d6adf926e559d5159937839293c92876da00feeb93115dad32a4532b7875df94025ec360b0e0289e32c77f997f9c7092abb3062351ff9c8c1f5130bdf24052193ca1089a23da152565f9473f6dfb69558297ae789dc0aa81c472f3e139780afde42a79bb2478ad2b8623dc986131df41578d7e9a22ca76499f8ce57ec8fc51847ad831b3efb4942c67784cc23817d60f1e426c0cb82d1474bbcde8fbaa8514747476e2a40429e6b7c57d193d4491676c131ca66e6838a0976c28cf7f16ad16a8da7d0380a1a41dfaf9111bcaab468dc8e040e3d1c897510b7a4dd042851e6dd3e5a6711c256711db95be997b2d8d13367399f35b1f8993f2dd1f46c7047555f05e70590e3b3376929729b9d76b340243e5f511a0ddfc9cc7dc9fc259e445057df5c00ac35cf6d5c955da08f68a0822f41606d3b53461c1e079358b224a307e440fb824b3bb59e433cf677c137324b55054152b6f0a2f0190a868b8b381030ebc6d111c66f675b6027966022984faf0c2eb78cbbfe306279cddca994fdc500c3e8be151b9589ab7508f126c92560d6b33bab60c4e00367f9803174780eaa2d83c981af55e910091939c4fc895f0a7c276f0ca094408e4549af5b6cfda8133c1ff9a0c3e2efee6bb9830ecc6fca1d8fa9"})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r2, {0xffffff9e}}}, 0x24}}, 0x0)

16:58:06 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000f00000000000000000"], 0x14}}, 0x0)

16:58:06 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000180)={0x0, 0x100, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0x10e15})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
userfaultfd(0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10000, 0x0)
ioctl$GIO_UNISCRNMAP(r2, 0x4b69, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200))
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz1'}, 0x1200e)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0))
read$FUSE(r1, &(0x7f0000001000), 0x102d)
write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x1f7)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)

16:58:06 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x0, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:06 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = dup2(r0, r0)
openat$cgroup_int(r1, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountstats\x00')
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0xc2, 0x4)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
recvmsg$kcm(r2, &(0x7f0000000600)={&(0x7f00000004c0)=@ll={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/102, 0x66}], 0x1, 0x0, 0x0, 0x1f}, 0x2)
ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000640)={@loopback, 0x48, r3})

16:58:06 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
getpgid(0x0)
capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880))
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_DIRTY_TLB(r0, 0x400caeaa, &(0x7f00000002c0)={0x7, 0x5})
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000340))
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000))
write$P9_RXATTRCREATE(r0, &(0x7f0000000140)={0x7}, 0x7)
clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
write$P9_RXATTRCREATE(r0, &(0x7f0000000280)={0x7, 0x21, 0x2}, 0x7)

[ 2406.575801] input: syz1 as /devices/virtual/input/input1830
16:58:06 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x0, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:07 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42a66ef9]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:58:07 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:07 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x0, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:07 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x0, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2406.929727] input: syz1 as /devices/virtual/input/input1832
16:58:07 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2407.027573] input: syz1 as /devices/virtual/input/input1833
16:58:07 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x0, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:07 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000004003000000000000"], 0x14}}, 0x0)

16:58:08 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x0, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:08 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x0, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:08 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080), 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:58:08 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x0, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:08 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:08 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000f0ffffff0000000000"], 0x14}}, 0x0)

16:58:08 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2407.825599] input: syz1 as /devices/virtual/input/input1834
16:58:08 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x0, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:08 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200001, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:58:08 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x0, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:08 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x0, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:08 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x0, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:08 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:08 executing program 5:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x6, 0x6fe8, 0x7})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

16:58:08 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x0, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:08 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x0, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:08 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2408.432336] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000
[ 2408.476452] syz-executor2 cpuset=syz2 mems_allowed=0
[ 2408.482255] CPU: 0 PID: 30904 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #255
[ 2408.489668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2408.499049] Call Trace:
[ 2408.501653]  dump_stack+0x244/0x39d
[ 2408.505293]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2408.510501]  dump_header+0x27b/0xf72
[ 2408.514229]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2408.519768]  ? check_preemption_disabled+0x48/0x280
[ 2408.524785]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2408.530333]  ? pagefault_out_of_memory+0x197/0x197
[ 2408.535264]  ? debug_smp_processor_id+0x1c/0x20
[ 2408.539939]  ? perf_trace_lock+0x14d/0x7a0
[ 2408.544177]  ? debug_smp_processor_id+0x1c/0x20
[ 2408.548863]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2408.553814]  ? lock_is_held_type+0x210/0x210
[ 2408.558240]  ? perf_trace_lock+0x7a0/0x7a0
[ 2408.562483]  ? debug_smp_processor_id+0x1c/0x20
[ 2408.567155]  ? perf_trace_lock+0x14d/0x7a0
[ 2408.571397]  ? zap_class+0x640/0x640
[ 2408.575120]  ? print_usage_bug+0xc0/0xc0
[ 2408.579186]  ? lock_is_held_type+0x210/0x210
[ 2408.583632]  ? perf_trace_lock+0x7a0/0x7a0
[ 2408.587898]  ? find_held_lock+0x36/0x1c0
[ 2408.591980]  ? mark_held_locks+0xc7/0x130
[ 2408.596141]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2408.601247]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2408.606359]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2408.610945]  ? trace_hardirqs_on+0xbd/0x310
[ 2408.615270]  ? kasan_check_read+0x11/0x20
[ 2408.619438]  ? ___ratelimit+0x3b4/0x672
[ 2408.623417]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2408.628549]  ? trace_hardirqs_on+0x310/0x310
[ 2408.632963]  ? lock_downgrade+0x900/0x900
[ 2408.637124]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2408.642232]  ? ___ratelimit+0x3b9/0x672
[ 2408.646230]  ? idr_get_free+0xf70/0xf70
[ 2408.650205]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2408.654705]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2408.659220]  oom_kill_process.cold.27+0x10/0x903
[ 2408.663991]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2408.668496]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2408.673093]  ? oom_evaluate_task+0x540/0x540
[ 2408.677507]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2408.683055]  ? cgroup_procs_next+0x70/0x70
[ 2408.687331]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2408.691862]  ? oom_badness+0xaa0/0xaa0
[ 2408.695786]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2408.700558]  ? mem_cgroup_iter_break+0x30/0x30
[ 2408.705171]  ? mark_held_locks+0xc7/0x130
[ 2408.709328]  out_of_memory+0xa84/0x1430
[ 2408.713313]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2408.717919]  ? kasan_check_read+0x11/0x20
[ 2408.722070]  ? oom_killer_disable+0x3a0/0x3a0
[ 2408.726581]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2408.731450]  ? memory_oom_group_write+0x160/0x160
[ 2408.736286]  ? mem_cgroup_try_charge+0x627/0xe20
[ 2408.741084]  ? page_counter_try_charge+0x1c1/0x220
[ 2408.746042]  try_charge+0xda9/0x1700
[ 2408.749756]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2408.754682]  ? kasan_check_read+0x11/0x20
[ 2408.758840]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2408.763511]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2408.769057]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2408.774511]  ? lock_page_memcg+0x350/0x350
[ 2408.778751]  ? lock_acquire+0x1ed/0x520
[ 2408.782752]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2408.788112]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2408.793677]  ? check_preemption_disabled+0x48/0x280
[ 2408.798752]  ? kasan_check_read+0x11/0x20
[ 2408.802920]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2408.808218]  ? rcu_softirq_qs+0x20/0x20
[ 2408.812217]  mem_cgroup_try_charge+0x627/0xe20
[ 2408.816827]  ? mem_cgroup_protected+0xa60/0xa60
[ 2408.821529]  ? __lock_acquire+0x62f/0x4c20
[ 2408.825770]  ? __lock_acquire+0x62f/0x4c20
[ 2408.830018]  ? do_futex+0x249/0x26d0
[ 2408.833748]  ? mark_held_locks+0x130/0x130
[ 2408.837993]  ? mark_held_locks+0x130/0x130
[ 2408.842264]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2408.847842]  mem_cgroup_try_charge_delay+0x1d/0xa0
[ 2408.852786]  __handle_mm_fault+0x284e/0x5be0
[ 2408.857234]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 2408.862083]  ? lock_is_held_type+0x210/0x210
[ 2408.866498]  ? perf_trace_lock+0x7a0/0x7a0
[ 2408.870736]  ? perf_trace_lock+0x7a0/0x7a0
[ 2408.875007]  ? zap_class+0x640/0x640
[ 2408.878727]  ? zap_class+0x640/0x640
[ 2408.882452]  ? find_held_lock+0x36/0x1c0
[ 2408.886532]  ? handle_mm_fault+0x42a/0xc70
[ 2408.890776]  ? lock_downgrade+0x900/0x900
[ 2408.894958]  ? check_preemption_disabled+0x48/0x280
[ 2408.899990]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2408.905014]  ? kasan_check_read+0x11/0x20
[ 2408.909182]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2408.914477]  ? rcu_softirq_qs+0x20/0x20
[ 2408.918452]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2408.923560]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2408.929104]  ? check_preemption_disabled+0x48/0x280
[ 2408.934136]  handle_mm_fault+0x54f/0xc70
[ 2408.938208]  ? __handle_mm_fault+0x5be0/0x5be0
[ 2408.942810]  ? find_vma+0x34/0x190
[ 2408.946370]  __do_page_fault+0x5e8/0xe60
[ 2408.950464]  ? trace_hardirqs_off+0xb8/0x310
[ 2408.954919]  do_page_fault+0xf2/0x7e0
[ 2408.958725]  ? vmalloc_sync_all+0x30/0x30
[ 2408.962880]  ? error_entry+0x70/0xd0
[ 2408.966647]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2408.971670]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2408.976604]  ? do_syscall_64+0x820/0x820
[ 2408.980668]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2408.985515]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2408.990535]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2408.995995]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2409.001018]  ? page_fault+0x8/0x30
[ 2409.004567]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2409.009418]  ? page_fault+0x8/0x30
[ 2409.012968]  page_fault+0x1e/0x30
[ 2409.016426] RIP: 0023:0x80484e2
[ 2409.019708] Code: b7 c0 d3 e0 09 d0 66 89 07 e9 4f 01 00 00 8b 44 24 10 8b 54 24 14 0b 44 24 18 0b 54 24 1c 09 c2 75 0f 8b 44 24 28 8b 7c 24 20 <89> 38 e9 2c 01 00 00 8a 4c 24 18 31 c0 8b 74 24 28 f6 c1 20 0f 94
[ 2409.038636] RSP: 002b:000000000845fbd0 EFLAGS: 00010246
[ 2409.044010] RAX: 0000000020001fe8 RBX: 0000000000000000 RCX: 000000000bb4ba72
[ 2409.051275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2409.058540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2409.065811] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
16:58:09 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000000000000000200"], 0x14}}, 0x0)

16:58:09 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x2, 0x21f5, 0x8, 0x8}, 'syz0\x00', 0x2e})
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x4, 0x701000)
recvfrom$packet(r1, &(0x7f0000000100)=""/18, 0x12, 0x40000000, 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x69)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040), 0x4)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000]}, 0x45c)

16:58:09 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$netlink(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000800)={0x10, 0x2e, 0x1}, 0x10}], 0x1}, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mq_unlink(&(0x7f0000000040)='cgroup2\x00')
mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2001})
mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0)

16:58:09 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2409.073079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2409.118912] input: syz1 as /devices/virtual/input/input1838
16:58:09 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x1)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ff8c90aef74000004800000000000000000000000000000000000000831710ff6b777287e24b7ee1a0eb99bfffffff3f765e6bd176470605", 0x38}], 0x1)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101040, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000200)=0x2, 0x4)
accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_proto_private(0xffffffffffffff9c, 0x89ec, &(0x7f0000000240)="ca60fdabec24f211c5085198d18a660e975305b15166b9ff9036d6570b5684e7480943585a81ded01e9a2345a187ccc5a00f46a15a864f03804e17eb847963fdc3c90ef6d57f65d56a3f153deb1de3685ceb4dc876498048a248cfdbadf433acd4ec64c897a782e7bcd43c87500aa935b2ba7db7cff9e95f0787b97ae85a2b69664e3d1fb67b9142498b8441e093da9419d407d4150c08b5ebfa139f997abd3fa7ce4dcae09089aa443d51281100e19fd65a7113a9a75ef9182278fa8c83f59a66e1d78c2bfc30b82b268a509f5640dee51fc1d9fdf7f9e494a90f")

[ 2409.167929] Task in /syz2 killed as a result of limit of /syz2
[ 2409.179151] memory: usage 307200kB, limit 307200kB, failcnt 52
[ 2409.194997] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2409.203423] input: syz1 as /devices/virtual/input/input1839
16:58:09 executing program 0:
write$evdev(0xffffffffffffffff, &(0x7f0000000100), 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=<r1=>0x0, &(0x7f0000000440)=0x4)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000480)={r1, 0xffffffffffffffe0}, 0x8)
getrusage(0xffffffffffffffff, &(0x7f0000000200))
syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000300)=0x14)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000")
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)
pread64(r4, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0)
fgetxattr(r2, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000200)}], 0x9249249249249a8, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0), 0x4)
socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000007c0))
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000540)={{0x6, 0x1ff}, {0x6, 0x40}, 0x401, 0x4, 0x4})
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000100))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0))
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
dup2(r2, r5)
write$evdev(r6, &(0x7f0000000040), 0x0)
ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7)

[ 2409.279289] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2409.285646] Memory cgroup stats for /syz2: cache:16496KB rss:263624KB rss_huge:249856KB shmem:16404KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:16396KB active_anon:263660KB inactive_file:4KB active_file:0KB unevictable:0KB
[ 2409.323843] Memory cgroup out of memory: Kill process 25071 (syz-executor2) score 1117 or sacrifice child
[ 2409.343921] Killed process 25071 (syz-executor2) total-vm:70252kB, anon-rss:6304kB, file-rss:32768kB, shmem-rss:0kB
16:58:09 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x200000, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5488, 0x0, 0x7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0xe4f]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
inotify_init()

[ 2409.413427] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000
[ 2409.435964] QAT: Invalid ioctl
[ 2409.483655] syz-executor2 cpuset=syz2 mems_allowed=0
[ 2409.515004] input: syz1 as /devices/virtual/input/input1840
[ 2409.530494] CPU: 0 PID: 30912 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #255
[ 2409.537867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2409.547221] Call Trace:
[ 2409.549860]  dump_stack+0x244/0x39d
[ 2409.553500]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2409.558712]  dump_header+0x27b/0xf72
[ 2409.562440]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2409.567986]  ? check_preemption_disabled+0x48/0x280
[ 2409.573054]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2409.578619]  ? pagefault_out_of_memory+0x197/0x197
[ 2409.583556]  ? debug_smp_processor_id+0x1c/0x20
[ 2409.588228]  ? perf_trace_lock+0x14d/0x7a0
[ 2409.592466]  ? debug_smp_processor_id+0x1c/0x20
[ 2409.597141]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2409.602087]  ? lock_is_held_type+0x210/0x210
[ 2409.606544]  ? perf_trace_lock+0x7a0/0x7a0
[ 2409.610790]  ? debug_smp_processor_id+0x1c/0x20
[ 2409.615477]  ? perf_trace_lock+0x14d/0x7a0
[ 2409.619721]  ? zap_class+0x640/0x640
[ 2409.623442]  ? print_usage_bug+0xc0/0xc0
[ 2409.627541]  ? lock_is_held_type+0x210/0x210
[ 2409.631956]  ? perf_trace_lock+0x7a0/0x7a0
[ 2409.636200]  ? find_held_lock+0x36/0x1c0
[ 2409.640275]  ? mark_held_locks+0xc7/0x130
[ 2409.644428]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2409.649533]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2409.654641]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2409.659232]  ? trace_hardirqs_on+0xbd/0x310
[ 2409.663558]  ? kasan_check_read+0x11/0x20
[ 2409.667707]  ? ___ratelimit+0x3b4/0x672
[ 2409.671686]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2409.676796]  ? trace_hardirqs_on+0x310/0x310
[ 2409.681235]  ? lock_downgrade+0x900/0x900
[ 2409.685406]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2409.690512]  ? ___ratelimit+0x3b9/0x672
[ 2409.694507]  ? idr_get_free+0xf70/0xf70
[ 2409.698481]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2409.703026]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2409.707541]  oom_kill_process.cold.27+0x10/0x903
[ 2409.712306]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2409.716848]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2409.721455]  ? oom_evaluate_task+0x540/0x540
[ 2409.725869]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2409.731414]  ? cgroup_procs_next+0x70/0x70
[ 2409.735673]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2409.740189]  ? oom_badness+0xaa0/0xaa0
[ 2409.744122]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2409.748887]  ? mem_cgroup_iter_break+0x30/0x30
[ 2409.753519]  ? mark_held_locks+0xc7/0x130
[ 2409.757679]  out_of_memory+0xa84/0x1430
[ 2409.761665]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2409.766289]  ? kasan_check_read+0x11/0x20
[ 2409.770474]  ? oom_killer_disable+0x3a0/0x3a0
[ 2409.775020]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2409.779887]  ? memory_oom_group_write+0x160/0x160
[ 2409.784731]  ? mem_cgroup_try_charge+0x627/0xe20
[ 2409.789500]  ? page_counter_try_charge+0x1c1/0x220
[ 2409.794482]  try_charge+0xda9/0x1700
[ 2409.798212]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2409.803178]  ? kasan_check_read+0x11/0x20
[ 2409.807370]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2409.812068]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2409.817618]  ? lock_page_memcg+0x350/0x350
[ 2409.821914]  ? lock_acquire+0x1ed/0x520
[ 2409.825896]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2409.831265]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2409.836820]  ? check_preemption_disabled+0x48/0x280
[ 2409.841855]  ? kasan_check_read+0x11/0x20
[ 2409.846009]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2409.851321]  ? rcu_softirq_qs+0x20/0x20
[ 2409.855388]  mem_cgroup_try_charge+0x627/0xe20
[ 2409.859987]  ? update_load_avg+0x387/0x2470
[ 2409.864374]  ? mem_cgroup_protected+0xa60/0xa60
[ 2409.869081]  ? check_preemption_disabled+0x48/0x280
[ 2409.874134]  ? __lock_acquire+0x62f/0x4c20
[ 2409.878376]  ? __lock_acquire+0x62f/0x4c20
[ 2409.882635]  ? mark_held_locks+0x130/0x130
[ 2409.886891]  ? mark_held_locks+0x130/0x130
[ 2409.891150]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2409.896704]  mem_cgroup_try_charge_delay+0x1d/0xa0
[ 2409.901647]  __handle_mm_fault+0x284e/0x5be0
[ 2409.906074]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 2409.910942]  ? lock_is_held_type+0x210/0x210
[ 2409.915361]  ? perf_trace_lock+0x7a0/0x7a0
[ 2409.919601]  ? perf_trace_lock+0x7a0/0x7a0
[ 2409.923896]  ? kasan_check_read+0x11/0x20
[ 2409.928060]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2409.933350]  ? zap_class+0x640/0x640
[ 2409.937081]  ? zap_class+0x640/0x640
[ 2409.940820]  ? find_held_lock+0x36/0x1c0
[ 2409.944937]  ? handle_mm_fault+0x42a/0xc70
[ 2409.949219]  ? lock_downgrade+0x900/0x900
[ 2409.953372]  ? check_preemption_disabled+0x48/0x280
[ 2409.958396]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2409.963335]  ? kasan_check_read+0x11/0x20
[ 2409.967486]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2409.972764]  ? rcu_softirq_qs+0x20/0x20
[ 2409.976752]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2409.981880]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2409.987426]  ? check_preemption_disabled+0x48/0x280
[ 2409.992454]  handle_mm_fault+0x54f/0xc70
[ 2409.996536]  ? __handle_mm_fault+0x5be0/0x5be0
[ 2410.001171]  ? find_vma+0x34/0x190
[ 2410.004726]  __do_page_fault+0x5e8/0xe60
[ 2410.008789]  ? perf_trace_lock+0x14d/0x7a0
[ 2410.013056]  do_page_fault+0xf2/0x7e0
[ 2410.016894]  ? vmalloc_sync_all+0x30/0x30
[ 2410.021076]  ? error_entry+0x76/0xd0
[ 2410.024799]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2410.029843]  ? find_held_lock+0x36/0x1c0
[ 2410.033915]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2410.038761]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2410.043795]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2410.048661]  page_fault+0x1e/0x30
[ 2410.052165] RIP: 0010:__clear_user+0x3b/0x70
[ 2410.056612] Code: f9 be 13 00 00 00 48 c7 c7 00 3d d8 88 e8 ed 33 d8 f9 0f 1f 00 48 89 d8 48 c1 eb 03 4c 89 e7 83 e0 07 48 89 d9 48 85 c9 74 0f <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a
[ 2410.075512] RSP: 0000:ffff888146df79f8 EFLAGS: 00010202
[ 2410.080874] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008
[ 2410.088147] RDX: 0000000000000000 RSI: ffffffff81b19913 RDI: 00000000f5f44f80
[ 2410.095431] RBP: ffff888146df7a08 R08: 1ffff11028dbef1b R09: 0000000000000008
[ 2410.102702] R10: 0000000000000001 R11: ffff888183418340 R12: 00000000f5f44f80
[ 2410.109985] R13: 00000000f5f44d10 R14: 0000000000000001 R15: 00007ffffffff000
[ 2410.117310]  ? __might_fault+0x1a3/0x1e0
[ 2410.121402]  ? __clear_user+0x23/0x70
[ 2410.125229]  copy_fpstate_to_sigframe+0x297/0x530
[ 2410.130087]  get_sigframe.isra.2.constprop.3+0x4e4/0x630
[ 2410.135552]  ? ia32_restore_sigcontext+0x520/0x520
[ 2410.140521]  ? get_signal+0xfaf/0x1980
[ 2410.144427]  ? ptrace_notify+0x130/0x130
[ 2410.148515]  ia32_setup_rt_frame+0xe8/0x950
[ 2410.152844]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2410.157958]  ? ia32_setup_frame+0x7b0/0x7b0
[ 2410.162296]  ? force_sig_fault+0x12c/0x1d0
[ 2410.166543]  do_signal+0x42c/0x21c0
[ 2410.170202]  ? kasan_check_write+0x14/0x20
[ 2410.174474]  ? up_read+0x225/0x2c0
[ 2410.178066]  ? setup_sigcontext+0x7d0/0x7d0
[ 2410.182404]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2410.187962]  ? exit_to_usermode_loop+0x8c/0x380
[ 2410.192645]  ? exit_to_usermode_loop+0x8c/0x380
[ 2410.197324]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2410.201948]  exit_to_usermode_loop+0x2e5/0x380
[ 2410.206538]  ? __bpf_trace_sys_exit+0x30/0x30
[ 2410.211080]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2410.216100]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2410.220951]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2410.225822]  prepare_exit_to_usermode+0x342/0x3b0
[ 2410.230695]  ? trace_event_raw_event_sys_enter+0x700/0x700
[ 2410.236327]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2410.241178]  ? page_fault+0x8/0x30
[ 2410.244724]  retint_user+0x8/0x18
[ 2410.248179] RIP: 0023:0xf5f45168
16:58:10 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x0, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:10 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000000000000000300"], 0x14}}, 0x0)

[ 2410.251551] Code: 14 08 60 af 14 08 6c af 14 08 28 52 f4 f5 b7 b5 04 08 f0 00 00 00 68 af 14 08 80 00 00 00 00 00 00 00 00 00 00 00 6c af 14 08 <28> 52 f4 f5 d5 b5 04 08 00 00 00 00 00 00 00 00 00 0f 3d 00 d0 2a
[ 2410.270450] RSP: 002b:00000000f5f450dc EFLAGS: 00010296
[ 2410.275831] RAX: ffffffffffffffff RBX: 0000000020000500 RCX: 0000000000000009
[ 2410.283105] RDX: 0000000000000968 RSI: 0000000000000000 RDI: 0000000000000000
[ 2410.290407] RBP: 000000000814af60 R08: 0000000000000000 R09: 0000000000000000
[ 2410.297685] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[ 2410.304954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:58:10 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x800000800000001)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6}, 0x2c)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x1, 0x4)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000440)={0x0, 0x80000, <r1=>0xffffffffffffff9c})
ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000580)={0xb45, 0x8})
r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000280)={0x1})
syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'ip_vti0\x00'})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[]}}, 0x20000000)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000380), &(0x7f0000000480)=0xfffffffffffffced)
r3 = syz_open_dev$adsp(&(0x7f0000002a00)='/dev/adsp#\x00', 0x4, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000002a40))
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000002c0)={@ipv4={[], [], @rand_addr}}, &(0x7f0000000540)=0x14)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000600)=0x3fc)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f00000005c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000640)=""/16, 0x10}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/1, 0x1}, {&(0x7f00000016c0)=""/111, 0x6f}], 0x4, &(0x7f0000002c00)=ANY=[@ANYBLOB="3f0000000000000001000000000000002000000000000000010000c008000000100000000000000007000000000000000782220d5f21bda06abf4a306ed409b609b92eccf330161cbc4dce1dab721741e675da54ba13ba32087db1277cdbd51ce3bae2530c276568137a23c43d7a5bf4615cbd5faa687bcbff261b2814d64b9d4b039ab2961d5d1a7b34006a9adcadd555fa7583"], 0x94, 0x488d1}, 0x40000)
pipe2(&(0x7f0000000180), 0x80000)
connect$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10)
clock_gettime(0x0, &(0x7f0000000340))
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/116, 0x74)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000100))
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000000c0))

[ 2410.404822] QAT: Invalid ioctl
[ 2410.421321] input: syz1 as /devices/virtual/input/input1841
[ 2410.762578] Task in /syz2 killed as a result of limit of /syz2
[ 2410.768783] memory: usage 300848kB, limit 307200kB, failcnt 52
[ 2410.777521] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2410.790596] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2410.797167] Memory cgroup stats for /syz2: cache:16496KB rss:257420KB rss_huge:243712KB shmem:16404KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:16396KB active_anon:257452KB inactive_file:4KB active_file:0KB unevictable:0KB
[ 2410.836528] Memory cgroup out of memory: Kill process 24824 (syz-executor2) score 1112 or sacrifice child
[ 2410.846703] Killed process 24824 (syz-executor2) total-vm:70384kB, anon-rss:4260kB, file-rss:33464kB, shmem-rss:0kB
[ 2410.862107] oom_reaper: reaped process 24824 (syz-executor2), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB
[ 2410.874358] syz-executor1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000
[ 2410.889785] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2410.896228] CPU: 1 PID: 30924 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2410.903598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2410.912950] Call Trace:
[ 2410.915546]  dump_stack+0x244/0x39d
[ 2410.919202]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2410.924421]  dump_header+0x27b/0xf72
[ 2410.928155]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2410.933728]  ? check_preemption_disabled+0x48/0x280
[ 2410.938748]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2410.944295]  ? pagefault_out_of_memory+0x197/0x197
[ 2410.949249]  ? debug_smp_processor_id+0x1c/0x20
[ 2410.953921]  ? perf_trace_lock+0x14d/0x7a0
[ 2410.958164]  ? debug_smp_processor_id+0x1c/0x20
[ 2410.962871]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2410.967820]  ? lock_is_held_type+0x210/0x210
[ 2410.972245]  ? perf_trace_lock+0x7a0/0x7a0
[ 2410.976486]  ? debug_smp_processor_id+0x1c/0x20
[ 2410.981174]  ? perf_trace_lock+0x14d/0x7a0
[ 2410.985425]  ? zap_class+0x640/0x640
[ 2410.989192]  ? print_usage_bug+0xc0/0xc0
[ 2410.993254]  ? lock_is_held_type+0x210/0x210
[ 2410.997667]  ? perf_trace_lock+0x7a0/0x7a0
[ 2411.001925]  ? find_held_lock+0x36/0x1c0
[ 2411.006001]  ? mark_held_locks+0xc7/0x130
[ 2411.010167]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2411.015300]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2411.020428]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2411.025016]  ? trace_hardirqs_on+0xbd/0x310
[ 2411.029342]  ? kasan_check_read+0x11/0x20
[ 2411.033505]  ? ___ratelimit+0x3b4/0x672
[ 2411.037494]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2411.042599]  ? trace_hardirqs_on+0x310/0x310
[ 2411.047009]  ? lock_downgrade+0x900/0x900
[ 2411.051181]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2411.056284]  ? ___ratelimit+0x3b9/0x672
[ 2411.060275]  ? idr_get_free+0xf70/0xf70
[ 2411.064266]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2411.068764]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2411.073274]  oom_kill_process.cold.27+0x10/0x903
[ 2411.078051]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2411.082562]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2411.087151]  ? oom_evaluate_task+0x540/0x540
[ 2411.091575]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2411.097132]  ? cgroup_procs_next+0x70/0x70
[ 2411.101375]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2411.105869]  ? oom_badness+0xaa0/0xaa0
[ 2411.109762]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2411.114521]  ? rcu_lockdep_current_cpu_online+0x1a4/0x210
[ 2411.120076]  ? mem_cgroup_iter_break+0x30/0x30
[ 2411.124673]  ? cgroup_file_notify+0x226/0x2f0
[ 2411.129191]  out_of_memory+0xa84/0x1430
[ 2411.133184]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2411.137800]  ? kasan_check_read+0x11/0x20
[ 2411.141969]  ? oom_killer_disable+0x3a0/0x3a0
[ 2411.146511]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2411.151375]  ? memory_oom_group_write+0x160/0x160
[ 2411.156216]  ? memcg_kmem_charge_memcg+0x7c/0x120
[ 2411.161079]  ? page_counter_try_charge+0x1c1/0x220
[ 2411.166040]  try_charge+0xda9/0x1700
[ 2411.169774]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2411.174458]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2411.179389]  ? kasan_check_read+0x11/0x20
[ 2411.183538]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2411.188852]  ? rcu_softirq_qs+0x20/0x20
[ 2411.192878]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2411.198450]  ? __kernel_text_address+0xd/0x40
[ 2411.202955]  ? lock_page_memcg+0x350/0x350
[ 2411.207205]  ? lock_acquire+0x1ed/0x520
[ 2411.211218]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2411.216608]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2411.222150]  ? check_preemption_disabled+0x48/0x280
[ 2411.227182]  memcg_kmem_charge_memcg+0x7c/0x120
[ 2411.231860]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 2411.236359]  ? entry_INT80_compat+0x74/0x7e
[ 2411.240700]  memcg_kmem_charge+0x149/0x350
[ 2411.244945]  __alloc_pages_nodemask+0x75e/0xea0
[ 2411.249623]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2411.254907]  ? lock_downgrade+0x900/0x900
[ 2411.259078]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[ 2411.264115]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2411.269657]  ? check_preemption_disabled+0x48/0x280
[ 2411.274691]  ? rcu_lockdep_current_cpu_online+0x1a4/0x210
[ 2411.280238]  ? rcu_pm_notify+0xc0/0xc0
[ 2411.284160]  ? copy_process+0x2026/0x87a0
[ 2411.288324]  ? rcu_read_lock_sched_held+0x14f/0x180
[ 2411.293352]  ? kmem_cache_alloc_node+0x349/0x730
[ 2411.298116]  ? check_preemption_disabled+0x48/0x280
[ 2411.303171]  copy_process+0xa09/0x87a0
[ 2411.307062]  ? rcu_softirq_qs+0x20/0x20
[ 2411.311058]  ? mem_cgroup_hierarchy_write+0x230/0x230
[ 2411.316275]  ? __unlock_page_memcg+0x70/0x100
[ 2411.320815]  ? __lock_acquire+0x62f/0x4c20
[ 2411.325116]  ? __cleanup_sighand+0x70/0x70
[ 2411.329366]  ? print_usage_bug+0xc0/0xc0
[ 2411.333435]  ? print_usage_bug+0xc0/0xc0
[ 2411.337537]  ? print_usage_bug+0xc0/0xc0
[ 2411.341614]  ? __lock_acquire+0x62f/0x4c20
[ 2411.345854]  ? mark_held_locks+0x130/0x130
[ 2411.350106]  ? __lock_acquire+0x62f/0x4c20
[ 2411.354370]  ? __lock_acquire+0x62f/0x4c20
[ 2411.358629]  ? mark_held_locks+0x130/0x130
[ 2411.362892]  ? print_usage_bug+0xc0/0xc0
[ 2411.366982]  ? mark_held_locks+0x130/0x130
[ 2411.371264]  ? debug_smp_processor_id+0x1c/0x20
[ 2411.375938]  ? perf_trace_lock+0x14d/0x7a0
[ 2411.380237]  ? debug_smp_processor_id+0x1c/0x20
[ 2411.384924]  ? __lock_acquire+0x62f/0x4c20
[ 2411.389164]  ? check_preemption_disabled+0x48/0x280
[ 2411.394213]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2411.399761]  ? debug_smp_processor_id+0x1c/0x20
[ 2411.404435]  ? perf_trace_lock+0x14d/0x7a0
[ 2411.408669]  ? debug_smp_processor_id+0x1c/0x20
[ 2411.413355]  ? mark_held_locks+0x130/0x130
[ 2411.417607]  ? zap_class+0x640/0x640
[ 2411.421335]  ? __lock_acquire+0x62f/0x4c20
[ 2411.425577]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2411.431166]  ? check_preemption_disabled+0x48/0x280
[ 2411.436205]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2411.441751]  ? debug_smp_processor_id+0x1c/0x20
[ 2411.446940]  ? perf_trace_lock+0x14d/0x7a0
[ 2411.451195]  ? debug_smp_processor_id+0x1c/0x20
[ 2411.455881]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2411.460857]  ? lock_is_held_type+0x210/0x210
[ 2411.465295]  ? perf_trace_lock+0x7a0/0x7a0
[ 2411.469548]  ? zap_class+0x640/0x640
[ 2411.473285]  ? do_raw_spin_trylock+0x270/0x270
[ 2411.477880]  ? find_held_lock+0x36/0x1c0
[ 2411.481964]  ? perf_iterate_sb+0x189/0xc60
[ 2411.486206]  ? lock_downgrade+0x900/0x900
[ 2411.490358]  ? check_preemption_disabled+0x48/0x280
[ 2411.495381]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2411.500322]  ? kasan_check_read+0x11/0x20
[ 2411.504491]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2411.509773]  ? rcu_softirq_qs+0x20/0x20
[ 2411.513772]  ? perf_iterate_sb+0x1b0/0xc60
[ 2411.518021]  ? zap_class+0x640/0x640
[ 2411.521737]  ? find_held_lock+0x36/0x1c0
[ 2411.525812]  ? perf_event_comm_output+0x750/0x750
[ 2411.530658]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2411.536201]  ? check_preemption_disabled+0x48/0x280
[ 2411.541230]  ? __lock_is_held+0xb5/0x140
[ 2411.545300]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2411.550858]  ? check_preemption_disabled+0x48/0x280
[ 2411.555957]  ? debug_smp_processor_id+0x1c/0x20
[ 2411.560642]  ? perf_trace_lock+0x14d/0x7a0
[ 2411.564880]  ? rcu_read_lock_sched_held+0x14f/0x180
[ 2411.569932]  ? kfree+0x1f8/0x230
[ 2411.573312]  ? lock_is_held_type+0x210/0x210
[ 2411.577738]  ? zap_class+0x640/0x640
[ 2411.581475]  ? find_held_lock+0x36/0x1c0
[ 2411.585553]  ? do_mprotect_pkey+0x8d8/0xa60
[ 2411.589909]  _do_fork+0x1cb/0x11d0
[ 2411.593475]  ? fork_idle+0x1d0/0x1d0
[ 2411.597207]  ? up_write+0x7b/0x220
[ 2411.600776]  ? down_write_nested+0x130/0x130
[ 2411.605209]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2411.610793]  ? apparmor_file_mprotect+0xde/0x110
[ 2411.615603]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2411.621157]  ? security_file_mprotect+0x94/0xc0
[ 2411.625853]  ? do_mprotect_pkey+0x8dd/0xa60
[ 2411.630189]  ? up_read+0x225/0x2c0
[ 2411.633746]  ? do_int80_syscall_32+0x97/0x890
[ 2411.638244]  ? do_int80_syscall_32+0x97/0x890
[ 2411.642747]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2411.647343]  ? trace_hardirqs_on+0xbd/0x310
[ 2411.651687]  ? entry_INT80_compat+0x74/0x7e
[ 2411.656027]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2411.661162]  __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2411.666202]  do_int80_syscall_32+0x1fe/0x890
[ 2411.670610]  ? entry_INT80_compat+0x6c/0x7e
[ 2411.674951]  ? do_syscall_64+0x820/0x820
[ 2411.679018]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2411.683882]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2411.688907]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2411.693948]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2411.698812]  entry_INT80_compat+0x74/0x7e
[ 2411.702964] RIP: 0023:0x8081a34
[ 2411.706250] Code: 8b 44 24 04 89 41 08 c7 41 04 00 00 00 00 53 56 57 8b 74 24 24 8b 54 24 20 8b 5c 24 18 8b 7c 24 28 b8 78 00 00 00 89 19 cd 80 <5f> 5e 5b 85 c0 0f 8c 81 51 fd ff 74 01 c3 89 f5 f7 c7 00 00 01 00
[ 2411.725160] RSP: 002b:000000000845fb50 EFLAGS: 00000296 ORIG_RAX: 0000000000000078
[ 2411.732873] RAX: ffffffffffffffda RBX: 00000000003d0f00 RCX: 00000000f5fae224
[ 2411.740144] RDX: 00000000f5faeba8 RSI: 000000000845fb80 RDI: 00000000f5faeba8
[ 2411.747415] RBP: 000000000845fc28 R08: 0000000000000000 R09: 0000000000000000
[ 2411.754680] R10: 0000000000000000 R11: 0000000000000216 R12: 0000000000000000
16:58:12 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x0, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:12 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{0x10000000000}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/133)

16:58:12 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff00000000f0ffff0000000000"], 0x14}}, 0x0)

16:58:12 executing program 0:
write$evdev(0xffffffffffffffff, &(0x7f0000000100), 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=<r1=>0x0, &(0x7f0000000440)=0x4)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000480)={r1, 0xffffffffffffffe0}, 0x8)
getrusage(0xffffffffffffffff, &(0x7f0000000200))
syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000300)=0x14)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000")
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)
pread64(r4, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0)
fgetxattr(r2, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000200)}], 0x9249249249249a8, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0), 0x4)
socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000007c0))
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000540)={{0x6, 0x1ff}, {0x6, 0x40}, 0x401, 0x4, 0x4})
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000100))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0))
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
dup2(r2, r5)
write$evdev(r6, &(0x7f0000000040), 0x0)
ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7)

16:58:12 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x80000000000003, 0x406)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0x400000000000, 0x9})

[ 2411.761976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2411.824972] Task in /syz1 killed as a result of limit of /syz1
[ 2411.832359] input: syz1 as /devices/virtual/input/input1842
[ 2411.844425] memory: usage 307200kB, limit 307200kB, failcnt 365
[ 2411.868071] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2411.896239] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2411.915181] Memory cgroup stats for /syz1: cache:16KB rss:271356KB rss_huge:251904KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:271388KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 2411.948060] Memory cgroup out of memory: Kill process 23641 (syz-executor1) score 1106 or sacrifice child
[ 2411.992580] QAT: Invalid ioctl
[ 2412.004955] Killed process 23641 (syz-executor1) total-vm:70384kB, anon-rss:2216kB, file-rss:33464kB, shmem-rss:0kB
16:58:12 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:12 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, 0x0, 0x16, 0x0)
setrlimit(0x9, &(0x7f0000000000)={0x0, 0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, 0x0, &(0x7f0000000300))
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000))
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
write$P9_RRENAMEAT(r2, &(0x7f0000000140)={0x7, 0x4b, 0x2}, 0x7)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
socket$inet6(0xa, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0xfffffffffffffdca, r3)
r4 = socket(0x8, 0x8000f, 0x2)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
getgroups(0x0, &(0x7f0000001a80))
mknod(&(0x7f0000000a00)='./file0\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x4, 0x200)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhost-vsock\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)=ANY=[], &(0x7f0000000700))

16:58:12 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x0, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:12 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9c, 0x80200)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x1000}}, 0x18)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0))
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={<r2=>0x0, 0x4}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r2, 0x1}, 0x8)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)

16:58:12 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000113400000000000000"], 0x14}}, 0x0)

[ 2412.170129] input: syz1 as /devices/virtual/input/input1844
[ 2412.298487] input: syz1 as /devices/virtual/input/input1845
16:58:12 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x0, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:12 executing program 0:
write$evdev(0xffffffffffffffff, &(0x7f0000000100), 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=<r1=>0x0, &(0x7f0000000440)=0x4)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000480)={r1, 0xffffffffffffffe0}, 0x8)
getrusage(0xffffffffffffffff, &(0x7f0000000200))
syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000300)=0x14)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000")
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)
pread64(r4, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0)
fgetxattr(r2, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000200)}], 0x9249249249249a8, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0), 0x4)
socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000007c0))
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000540)={{0x6, 0x1ff}, {0x6, 0x40}, 0x401, 0x4, 0x4})
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000100))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0))
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
dup2(r2, r5)
write$evdev(r6, &(0x7f0000000040), 0x0)
ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7)

16:58:12 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:12 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x0, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2412.458518] syz-executor1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0
[ 2412.529372] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2412.548909] CPU: 0 PID: 1614 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2412.556233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2412.565587] Call Trace:
[ 2412.568198]  dump_stack+0x244/0x39d
[ 2412.571851]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2412.577058]  ? mark_held_locks+0x130/0x130
[ 2412.581299]  ? mark_held_locks+0x130/0x130
[ 2412.585547]  dump_header+0x27b/0xf72
[ 2412.589292]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2412.594889]  ? check_preemption_disabled+0x48/0x280
[ 2412.599910]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2412.605454]  ? pagefault_out_of_memory+0x197/0x197
[ 2412.610385]  ? debug_smp_processor_id+0x1c/0x20
[ 2412.615091]  ? perf_trace_lock+0x14d/0x7a0
[ 2412.619366]  ? debug_smp_processor_id+0x1c/0x20
[ 2412.624043]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2412.629003]  ? lock_is_held_type+0x210/0x210
[ 2412.632416] QAT: Invalid ioctl
[ 2412.633427]  ? perf_trace_lock+0x7a0/0x7a0
[ 2412.633448]  ? debug_smp_processor_id+0x1c/0x20
[ 2412.633462]  ? perf_trace_lock+0x14d/0x7a0
[ 2412.633478]  ? zap_class+0x640/0x640
[ 2412.633497]  ? print_usage_bug+0xc0/0xc0
[ 2412.633513]  ? lock_is_held_type+0x210/0x210
[ 2412.633547]  ? find_held_lock+0x36/0x1c0
[ 2412.666075]  ? mark_held_locks+0xc7/0x130
[ 2412.670240]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2412.675354]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2412.680475]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2412.685071]  ? trace_hardirqs_on+0xbd/0x310
[ 2412.689401]  ? kasan_check_read+0x11/0x20
[ 2412.689418]  ? ___ratelimit+0x3b4/0x672
[ 2412.689437]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2412.689455]  ? trace_hardirqs_on+0x310/0x310
[ 2412.689473]  ? lock_downgrade+0x900/0x900
[ 2412.689497]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2412.689514]  ? ___ratelimit+0x3b9/0x672
[ 2412.689534]  ? idr_get_free+0xf70/0xf70
[ 2412.689552]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2412.697666]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2412.697695]  oom_kill_process.cold.27+0x10/0x903
[ 2412.697712]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2412.697730]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2412.697758]  ? oom_evaluate_task+0x540/0x540
[ 2412.697774]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2412.697796]  ? cgroup_procs_next+0x70/0x70
[ 2412.761402]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2412.765908]  ? oom_badness+0xaa0/0xaa0
[ 2412.765928]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2412.765951]  ? mem_cgroup_iter_break+0x30/0x30
[ 2412.774630]  ? mark_held_locks+0xc7/0x130
[ 2412.774654]  out_of_memory+0xa84/0x1430
[ 2412.774670]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2412.774691]  ? kasan_check_read+0x11/0x20
[ 2412.796133]  ? oom_killer_disable+0x3a0/0x3a0
[ 2412.800666]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2412.805524]  ? memory_oom_group_write+0x160/0x160
[ 2412.810380]  ? memcg_kmem_charge_memcg+0x7c/0x120
[ 2412.815256]  ? page_counter_try_charge+0x1c1/0x220
[ 2412.820260]  try_charge+0xda9/0x1700
[ 2412.824013]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2412.828710]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2412.833649]  ? kasan_check_read+0x11/0x20
[ 2412.837834]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2412.843122]  ? rcu_softirq_qs+0x20/0x20
[ 2412.847124]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2412.852675]  ? lock_page_memcg+0x350/0x350
[ 2412.856926]  ? lock_acquire+0x1ed/0x520
[ 2412.860910]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2412.866292]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2412.871872]  ? check_preemption_disabled+0x48/0x280
[ 2412.876907]  memcg_kmem_charge_memcg+0x7c/0x120
[ 2412.881604]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 2412.886111]  ? debug_smp_processor_id+0x1c/0x20
[ 2412.890794]  memcg_kmem_charge+0x149/0x350
[ 2412.895085]  __alloc_pages_nodemask+0x75e/0xea0
[ 2412.899774]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[ 2412.904878]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2412.910426]  ? check_preemption_disabled+0x48/0x280
[ 2412.915474]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2412.921059]  ? zap_class+0x640/0x640
[ 2412.924871]  ? __lock_is_held+0xb5/0x140
[ 2412.928991]  ? lock_downgrade+0x900/0x900
[ 2412.929026]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2412.929051]  alloc_pages_current+0x173/0x350
[ 2412.938723]  pte_alloc_one+0x1b/0x1a0
[ 2412.938742]  __pte_alloc+0x2a/0x350
[ 2412.938762]  copy_page_range+0x2017/0x2ee0
[ 2412.954876]  ? __pmd_alloc+0x450/0x450
[ 2412.958774]  ? vma_interval_tree_augment_rotate+0x181/0x1e0
[ 2412.964512]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2412.969382]  ? __save_stack_trace+0x8d/0xf0
[ 2412.973712]  ? rb_insert_color_cached+0x14b0/0x14b0
[ 2412.978747]  ? check_preemption_disabled+0x48/0x280
[ 2412.983780]  ? debug_smp_processor_id+0x1c/0x20
[ 2412.988628]  ? debug_smp_processor_id+0x1c/0x20
[ 2412.993302]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2412.998247]  ? lock_is_held_type+0x210/0x210
[ 2413.002671]  ? zap_class+0x640/0x640
[ 2413.006410]  ? lock_downgrade+0x900/0x900
[ 2413.010606]  ? zap_class+0x640/0x640
[ 2413.014341]  ? kasan_check_read+0x11/0x20
[ 2413.018504]  ? zap_class+0x640/0x640
[ 2413.022239]  ? find_held_lock+0x36/0x1c0
[ 2413.026313]  ? copy_process+0x4413/0x87a0
[ 2413.030463]  ? lock_downgrade+0x900/0x900
[ 2413.034617]  ? lock_release+0xa00/0xa00
[ 2413.038590]  ? perf_trace_sched_process_exec+0x860/0x860
[ 2413.044041]  ? dup_userfaultfd+0x6d8/0x890
[ 2413.048318]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2413.053359]  ? vma_compute_subtree_gap+0x160/0x240
[ 2413.058301]  ? validate_mm_rb+0xaa/0xc0
[ 2413.062288]  ? __vma_link_rb+0x26c/0x370
[ 2413.066359]  copy_process+0x45e9/0x87a0
[ 2413.070376]  ? __cleanup_sighand+0x70/0x70
[ 2413.074616]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2413.080162]  ? check_preemption_disabled+0x48/0x280
[ 2413.085185]  ? zap_class+0x640/0x640
[ 2413.088941]  ? perf_trace_lock+0x14d/0x7a0
[ 2413.093254]  ? lock_is_held_type+0x210/0x210
[ 2413.097677]  ? __lock_is_held+0xb5/0x140
[ 2413.101762]  ? zap_class+0x640/0x640
[ 2413.105529]  ? __lock_acquire+0x62f/0x4c20
[ 2413.109776]  ? __account_cfs_rq_runtime+0x790/0x790
[ 2413.114837]  ? find_held_lock+0x36/0x1c0
[ 2413.118969]  ? do_wp_page+0x127c/0x2920
[ 2413.122986]  ? lock_downgrade+0x900/0x900
[ 2413.127159]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2413.131494]  ? kasan_check_read+0x11/0x20
[ 2413.135665]  ? do_raw_spin_unlock+0xa7/0x330
[ 2413.140089]  ? do_raw_spin_trylock+0x270/0x270
[ 2413.144689]  ? pgd_free+0x380/0x380
[ 2413.148317]  ? lock_is_held_type+0x210/0x210
[ 2413.152743]  ? _raw_spin_unlock+0x2c/0x50
[ 2413.156932]  ? do_wp_page+0x528/0x2920
[ 2413.160856]  ? finish_mkwrite_fault+0x650/0x650
[ 2413.165607]  ? __lock_acquire+0x62f/0x4c20
[ 2413.169862]  ? mark_held_locks+0x130/0x130
[ 2413.174111]  ? find_held_lock+0x36/0x1c0
[ 2413.178207]  ? __lock_acquire+0x62f/0x4c20
[ 2413.182459]  ? __lock_acquire+0x62f/0x4c20
[ 2413.186703]  ? perf_trace_lock+0x14d/0x7a0
[ 2413.190949]  ? debug_smp_processor_id+0x1c/0x20
[ 2413.195628]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2413.200595]  ? trace_hardirqs_on+0xbd/0x310
[ 2413.204942]  ? mark_held_locks+0x130/0x130
[ 2413.209215]  ? perf_trace_lock+0x14d/0x7a0
[ 2413.213460]  ? debug_smp_processor_id+0x1c/0x20
[ 2413.218137]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2413.223686]  ? check_preemption_disabled+0x48/0x280
[ 2413.228717]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2413.234256]  ? check_preemption_disabled+0x48/0x280
[ 2413.239305]  ? __lock_is_held+0xb5/0x140
[ 2413.243395]  ? print_usage_bug+0xc0/0xc0
[ 2413.247474]  ? print_usage_bug+0xc0/0xc0
[ 2413.251532]  ? find_held_lock+0x36/0x1c0
[ 2413.255601]  ? __lock_acquire+0x62f/0x4c20
[ 2413.259844]  ? zap_class+0x640/0x640
[ 2413.263591]  ? ktime_get_coarse_real_ts64+0x273/0x370
[ 2413.268791]  ? mark_held_locks+0x130/0x130
[ 2413.273041]  ? lock_acquire+0x1ed/0x520
[ 2413.277011]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2413.281714]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2413.287264]  ? check_preemption_disabled+0x48/0x280
[ 2413.292283]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2413.297845]  ? check_preemption_disabled+0x48/0x280
[ 2413.302865]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2413.308416]  ? debug_smp_processor_id+0x1c/0x20
[ 2413.313091]  ? perf_trace_lock+0x14d/0x7a0
[ 2413.317345]  ? debug_smp_processor_id+0x1c/0x20
[ 2413.322022]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2413.326981]  ? lock_is_held_type+0x210/0x210
[ 2413.331395]  ? perf_trace_lock+0x7a0/0x7a0
[ 2413.335640]  ? zap_class+0x640/0x640
[ 2413.339366]  ? zap_class+0x640/0x640
[ 2413.343090]  ? lock_is_held_type+0x210/0x210
[ 2413.347507]  ? perf_trace_lock+0x7a0/0x7a0
[ 2413.351777]  ? find_held_lock+0x36/0x1c0
[ 2413.355907]  _do_fork+0x1cb/0x11d0
[ 2413.359473]  ? fork_idle+0x1d0/0x1d0
[ 2413.363207]  ? __do_page_fault+0x620/0xe60
[ 2413.367512]  ? kasan_check_read+0x11/0x20
[ 2413.371687]  ? _copy_to_user+0xc8/0x110
[ 2413.375672]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2413.381244]  ? put_old_timespec32+0x110/0x280
[ 2413.381279]  ? get_old_timespec32+0x2a0/0x2a0
[ 2413.381313]  ? do_fast_syscall_32+0x150/0xfb2
[ 2413.381328]  ? do_fast_syscall_32+0x150/0xfb2
[ 2413.381345]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2413.403947]  ? trace_hardirqs_on+0xbd/0x310
[ 2413.408293]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2413.413847]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2413.418452]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2413.423560]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2413.429124]  __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2413.434207]  do_fast_syscall_32+0x34d/0xfb2
[ 2413.438563]  ? do_int80_syscall_32+0x890/0x890
[ 2413.443154]  ? entry_SYSENTER_compat+0x68/0x7f
[ 2413.447947]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2413.452991]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2413.457896]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2413.462746]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2413.467776]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2413.473287]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2413.478182]  entry_SYSENTER_compat+0x70/0x7f
[ 2413.482606] RIP: 0023:0xf7fb2a29
[ 2413.485972] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 2413.504883] RSP: 002b:000000000845fd70 EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[ 2413.512605] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000
[ 2413.519878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000895a968
16:58:13 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000030000000000000000"], 0x14}}, 0x0)

16:58:13 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff00000088ffffff0000000000"], 0x14}}, 0x0)

16:58:13 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000000000000001000"], 0x14}}, 0x0)

16:58:13 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000fffff0000000000000"], 0x14}}, 0x0)

[ 2413.527161] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2413.534448] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2413.541741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:58:14 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x0, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:14 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffff29, 0x1fe)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000100)={0x86, <r2=>0x0, 0x10001, 0x3})
ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0086438, &(0x7f0000000140)={0x7ff, r2})
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040), 0x4)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=<r3=>0x0)
fremovexattr(r0, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00')
ptrace$pokeuser(0x6, r3, 0x9, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)

16:58:14 executing program 0:
write$evdev(0xffffffffffffffff, &(0x7f0000000100), 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=<r1=>0x0, &(0x7f0000000440)=0x4)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000480)={r1, 0xffffffffffffffe0}, 0x8)
getrusage(0xffffffffffffffff, &(0x7f0000000200))
syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000300)=0x14)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000")
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)
pread64(r4, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0)
fgetxattr(r2, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000200)}], 0x9249249249249a8, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0), 0x4)
socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000007c0))
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000540)={{0x6, 0x1ff}, {0x6, 0x40}, 0x401, 0x4, 0x4})
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000100))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0))
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
dup2(r2, r5)
write$evdev(r6, &(0x7f0000000040), 0x0)
ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7)

16:58:14 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x0, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2413.754204] Task in /syz1 killed as a result of limit of /syz1
[ 2413.770035] memory: usage 307196kB, limit 307200kB, failcnt 395
16:58:14 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000340000000000000"], 0x14}}, 0x0)

[ 2413.797194] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2413.851149] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2413.857312] Memory cgroup stats for /syz1: cache:16KB rss:271288KB rss_huge:251904KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:271416KB inactive_file:0KB active_file:0KB unevictable:0KB
16:58:14 executing program 3:
r0 = socket$inet6(0xa, 0x12, 0x2000005)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7d, &(0x7f0000000080)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @rand_addr=0x40}, @in6={0xa, 0x4e23, 0x1, @remote, 0x7f1}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e20, 0x6ca, @mcast1, 0x4}, @in6={0xa, 0x4e21, 0x346d, @mcast1, 0x8}], 0x94)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)

[ 2413.902234] Memory cgroup out of memory: Kill process 2596 (syz-executor1) score 1106 or sacrifice child
[ 2413.969420] Killed process 2596 (syz-executor1) total-vm:70384kB, anon-rss:2220kB, file-rss:33456kB, shmem-rss:0kB
[ 2414.025002] QAT: Invalid ioctl
16:58:14 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:14 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001240)={{}, 'syz1\x00'})
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4080, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040))
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80000001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)

16:58:14 executing program 3:
r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321050000f9ffffff00"], 0xa)
write$P9_RLERROR(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="095c06796901632374f688cc5c6b"], 0x1)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0/file0\x00', 0xe, 0x2)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @pic={0x1, 0x6, 0x7f, 0xba, 0xbeaf, 0x1e, 0x7f, 0x6, 0x3, 0x0, 0x8, 0x1, 0x1, 0x100, 0x2, 0xfff}})

16:58:14 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x0, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:14 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2414.253526] input: syz1 as /devices/virtual/input/input1848
16:58:14 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x0, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2414.337139] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0
[ 2414.364278] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2414.369657] CPU: 1 PID: 1614 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2414.376935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2414.386291] Call Trace:
[ 2414.388941]  dump_stack+0x244/0x39d
[ 2414.392582]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2414.397781]  ? mark_held_locks+0x130/0x130
[ 2414.402037]  ? mark_held_locks+0x130/0x130
[ 2414.406343]  dump_header+0x27b/0xf72
[ 2414.410094]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2414.415659]  ? check_preemption_disabled+0x48/0x280
[ 2414.420703]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2414.426253]  ? pagefault_out_of_memory+0x197/0x197
[ 2414.431192]  ? debug_smp_processor_id+0x1c/0x20
[ 2414.435877]  ? perf_trace_lock+0x14d/0x7a0
[ 2414.440127]  ? debug_smp_processor_id+0x1c/0x20
[ 2414.445303]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2414.450260]  ? lock_is_held_type+0x210/0x210
[ 2414.454686]  ? perf_trace_lock+0x7a0/0x7a0
[ 2414.458964]  ? debug_smp_processor_id+0x1c/0x20
[ 2414.463651]  ? perf_trace_lock+0x14d/0x7a0
[ 2414.467927]  ? zap_class+0x640/0x640
[ 2414.471673]  ? print_usage_bug+0xc0/0xc0
[ 2414.475746]  ? lock_is_held_type+0x210/0x210
[ 2414.480179]  ? find_held_lock+0x36/0x1c0
[ 2414.484260]  ? mark_held_locks+0xc7/0x130
[ 2414.488459]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2414.493576]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2414.498709]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2414.503329]  ? trace_hardirqs_on+0xbd/0x310
[ 2414.503347]  ? kasan_check_read+0x11/0x20
[ 2414.503365]  ? ___ratelimit+0x3b4/0x672
[ 2414.511846]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2414.511865]  ? trace_hardirqs_on+0x310/0x310
[ 2414.511882]  ? lock_downgrade+0x900/0x900
[ 2414.511905]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2414.511922]  ? ___ratelimit+0x3b9/0x672
[ 2414.511940]  ? idr_get_free+0xf70/0xf70
[ 2414.525390]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2414.525404]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2414.525434]  oom_kill_process.cold.27+0x10/0x903
[ 2414.534657]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2414.534674]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2414.534697]  ? oom_evaluate_task+0x540/0x540
[ 2414.569817]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2414.575370]  ? cgroup_procs_next+0x70/0x70
[ 2414.579620]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2414.584181]  ? oom_badness+0xaa0/0xaa0
[ 2414.588082]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2414.592883]  ? mem_cgroup_iter_break+0x30/0x30
[ 2414.597497]  ? mark_held_locks+0xc7/0x130
[ 2414.601657]  out_of_memory+0xa84/0x1430
[ 2414.605654]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2414.610252]  ? kasan_check_read+0x11/0x20
[ 2414.614412]  ? oom_killer_disable+0x3a0/0x3a0
[ 2414.618937]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2414.623787]  ? memory_oom_group_write+0x160/0x160
[ 2414.628643]  ? mem_cgroup_try_charge+0x627/0xe20
[ 2414.633413]  ? page_counter_try_charge+0x1c1/0x220
[ 2414.638363]  try_charge+0xda9/0x1700
[ 2414.642098]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2414.647066]  ? kasan_check_read+0x11/0x20
[ 2414.651233]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2414.655920]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2414.661505]  ? lock_page_memcg+0x350/0x350
[ 2414.665774]  ? lock_acquire+0x1ed/0x520
[ 2414.669784]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2414.675184]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2414.680749]  ? check_preemption_disabled+0x48/0x280
[ 2414.685782]  ? kasan_check_read+0x11/0x20
[ 2414.689946]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2414.695228]  ? rcu_softirq_qs+0x20/0x20
[ 2414.699229]  mem_cgroup_try_charge+0x627/0xe20
[ 2414.703830]  ? mem_cgroup_protected+0xa60/0xa60
[ 2414.708534]  ? __lock_acquire+0x62f/0x4c20
[ 2414.712778]  ? update_load_avg+0x2470/0x2470
[ 2414.717203]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2414.722794]  ? mark_held_locks+0x130/0x130
[ 2414.727082]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2414.732639]  mem_cgroup_try_charge_delay+0x1d/0xa0
[ 2414.737581]  wp_page_copy+0x51d/0x24f0
[ 2414.741473]  ? print_usage_bug+0xc0/0xc0
[ 2414.745568]  ? follow_pfn+0x2e0/0x2e0
[ 2414.749390]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2414.754964]  ? reuse_swap_page+0x4bd/0x1520
[ 2414.759311]  ? swp_swapcount+0x530/0x530
[ 2414.763389]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2414.768932]  ? check_preemption_disabled+0x48/0x280
[ 2414.773967]  ? __lock_acquire+0x62f/0x4c20
[ 2414.778257]  ? debug_smp_processor_id+0x1c/0x20
[ 2414.782989]  ? perf_trace_lock+0x14d/0x7a0
[ 2414.787254]  ? lock_is_held_type+0x210/0x210
[ 2414.791673]  ? debug_smp_processor_id+0x1c/0x20
[ 2414.796347]  ? perf_trace_lock+0x14d/0x7a0
[ 2414.800587]  ? debug_smp_processor_id+0x1c/0x20
[ 2414.805263]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2414.810193]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2414.815301]  ? zap_class+0x640/0x640
[ 2414.819023]  ? check_preemption_disabled+0x48/0x280
[ 2414.824051]  ? debug_smp_processor_id+0x1c/0x20
[ 2414.828736]  ? find_held_lock+0x36/0x1c0
[ 2414.832836]  ? do_wp_page+0x518/0x2920
[ 2414.836729]  ? lock_downgrade+0x900/0x900
[ 2414.840891]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2414.845241]  ? kasan_check_read+0x11/0x20
[ 2414.849409]  ? do_raw_spin_unlock+0xa7/0x330
[ 2414.853852]  ? do_raw_spin_trylock+0x270/0x270
[ 2414.858455]  ? __pte_alloc_kernel+0x220/0x220
[ 2414.862969]  ? check_preemption_disabled+0x48/0x280
[ 2414.868020]  do_wp_page+0x520/0x2920
[ 2414.871769]  ? finish_mkwrite_fault+0x650/0x650
[ 2414.876473]  ? print_usage_bug+0xc0/0xc0
[ 2414.880545]  ? __lock_acquire+0x62f/0x4c20
[ 2414.884797]  ? __lock_acquire+0x62f/0x4c20
[ 2414.889077]  ? mark_held_locks+0x130/0x130
[ 2414.893366]  ? debug_smp_processor_id+0x1c/0x20
[ 2414.898064]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2414.903632]  ? check_preemption_disabled+0x48/0x280
[ 2414.908664]  ? debug_smp_processor_id+0x1c/0x20
[ 2414.913357]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2414.918288]  ? check_preemption_disabled+0x48/0x280
[ 2414.923307]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2414.928897]  ? print_usage_bug+0xc0/0xc0
[ 2414.933000]  ? print_usage_bug+0xc0/0xc0
[ 2414.937085]  ? debug_smp_processor_id+0x1c/0x20
[ 2414.941770]  ? perf_trace_lock+0x14d/0x7a0
[ 2414.946015]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2414.950964]  ? print_usage_bug+0xc0/0xc0
[ 2414.955035]  ? zap_class+0x640/0x640
[ 2414.958771]  ? __lock_acquire+0x62f/0x4c20
[ 2414.963037]  ? lock_acquire+0x1ed/0x520
[ 2414.967052]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2414.971669]  ? kasan_check_read+0x11/0x20
[ 2414.975830]  ? do_raw_spin_lock+0x14f/0x350
[ 2414.980173]  ? rwlock_bug.part.2+0x90/0x90
[ 2414.984442]  __handle_mm_fault+0x3be9/0x5be0
[ 2414.988908]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 2414.993771]  ? lock_is_held_type+0x210/0x210
[ 2414.998218]  ? perf_trace_lock+0x7a0/0x7a0
[ 2415.002461]  ? perf_trace_lock+0x7a0/0x7a0
[ 2415.006733]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2415.011690]  ? zap_class+0x640/0x640
[ 2415.015411]  ? zap_class+0x640/0x640
[ 2415.019167]  ? find_held_lock+0x36/0x1c0
[ 2415.023250]  ? handle_mm_fault+0x42a/0xc70
[ 2415.027504]  ? lock_downgrade+0x900/0x900
[ 2415.031655]  ? check_preemption_disabled+0x48/0x280
16:58:15 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x0, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:15 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000020000000000000000"], 0x14}}, 0x0)

[ 2415.036678]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2415.041610]  ? kasan_check_read+0x11/0x20
[ 2415.045764]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2415.051059]  ? rcu_softirq_qs+0x20/0x20
[ 2415.055057]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2415.060165]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2415.065725]  ? check_preemption_disabled+0x48/0x280
[ 2415.065749]  handle_mm_fault+0x54f/0xc70
[ 2415.065768]  ? __handle_mm_fault+0x5be0/0x5be0
[ 2415.065788]  ? find_vma+0x34/0x190
[ 2415.065816]  __do_page_fault+0x5e8/0xe60
[ 2415.087067]  do_page_fault+0xf2/0x7e0
[ 2415.090905]  ? vmalloc_sync_all+0x30/0x30
[ 2415.095067]  ? error_entry+0x70/0xd0
[ 2415.098848]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2415.103895]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2415.108854]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2415.113708]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2415.118734]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2415.124202]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2415.129242]  ? page_fault+0x8/0x30
[ 2415.132797]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2415.137664]  ? page_fault+0x8/0x30
[ 2415.141213]  page_fault+0x1e/0x30
[ 2415.144709] RIP: 0023:0x807eeea
[ 2415.148028] Code: 65 a1 68 00 00 00 39 45 dc 0f 85 5c 01 00 00 8b 45 d8 65 a3 6c 00 00 00 8b 55 e4 85 d2 0f 85 84 00 00 00 8b 45 e0 85 c0 74 cb <89> 7d e4 89 c7 90 8b 1f 8b 43 08 85 c0 74 04 ff d0 8b 1f f0 ff 4b
[ 2415.166939] RSP: 002b:000000000845fd80 EFLAGS: 00010202
[ 2415.172325] RAX: 000000000845fd80 RBX: 0000000001200011 RCX: 0000000000000000
[ 2415.179630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000023cf
[ 2415.186904] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2415.194201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2415.201476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2415.211702] input: syz1 as /devices/virtual/input/input1849
16:58:15 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x10, 0x3, 0xc)
r2 = dup2(r0, r0)
ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40046432, &(0x7f0000000040)=0x1af8)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030807031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

16:58:15 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff0000000088ffffff00000000"], 0x14}}, 0x0)

16:58:15 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
io_setup(0x0, &(0x7f0000000040))
nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0)
clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe"], 0x0}, 0x48)
r2 = dup3(r1, r0, 0x0)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001080)=""/4096)
syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @local, {[@ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000280)=0x20})
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x18}, 0xc)
exit(0x7fffffff)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000580)=""/40)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000004c0)={0x5, 0x100, 0x2, 0x0, 0x5, 0xfffffffffffff800})
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400000, 0x0)
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000640)={0x2, {{0xa, 0x4e22, 0x11bfbb, @remote, 0x5}}, 0x1, 0x2, [{{0xa, 0x4e24, 0xd48, @loopback, 0x80000001}}, {{0xa, 0x4e24, 0xfffffffffffff261, @empty, 0x6}}]}, 0x18c)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_route_sched(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=@gettfilter={0x5c, 0x2e, 0x40b, 0x70bd29, 0x25dfdbfc, {0x0, r5, {0xffff, 0xffff}, {0xffff, 0xf}, {0x3, 0x1f}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x64e}, {0x8, 0xb, 0x8001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000500))
r6 = syz_open_dev$adsp(&(0x7f0000000540)='/dev/adsp#\x00', 0xffffffffffffffc0, 0x8000)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x320)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000005c0), &(0x7f0000000600)=0x14)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000), 0x0)

[ 2415.283104] Task in /syz1 killed as a result of limit of /syz1
[ 2415.289374] memory: usage 307200kB, limit 307200kB, failcnt 437
[ 2415.295603] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2415.302666] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
16:58:15 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x0, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2415.338381] Memory cgroup stats for /syz1: cache:16KB rss:271376KB rss_huge:251904KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:271392KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 2415.358576] netlink: 'syz-executor0': attribute type 2 has an invalid length.
[ 2415.392039] Memory cgroup out of memory: Kill process 27504 (syz-executor1) score 1106 or sacrifice child
[ 2415.413476] Killed process 27504 (syz-executor1) total-vm:70252kB, anon-rss:2212kB, file-rss:33464kB, shmem-rss:0kB
[ 2415.448224] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0
[ 2415.465630] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2415.475247] netlink: 'syz-executor0': attribute type 2 has an invalid length.
[ 2415.484259] CPU: 1 PID: 31111 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2415.491634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2415.501003] Call Trace:
[ 2415.503604]  dump_stack+0x244/0x39d
[ 2415.507250]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2415.512456]  ? mark_held_locks+0x130/0x130
[ 2415.516704]  ? mark_held_locks+0x130/0x130
[ 2415.521013]  dump_header+0x27b/0xf72
[ 2415.524755]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2415.530307]  ? check_preemption_disabled+0x48/0x280
[ 2415.535344]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2415.540905]  ? pagefault_out_of_memory+0x197/0x197
16:58:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair(0x11, 0x4, 0x80000001, &(0x7f0000000000))
dup3(r0, r1, 0x0)
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='memory.high\x00', 0x2, 0x0)
writev(r3, &(0x7f0000000700), 0x1000000000000110)

[ 2415.545906]  ? debug_smp_processor_id+0x1c/0x20
[ 2415.550594]  ? perf_trace_lock+0x14d/0x7a0
[ 2415.554859]  ? debug_smp_processor_id+0x1c/0x20
[ 2415.559541]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2415.559564]  ? lock_is_held_type+0x210/0x210
[ 2415.559583]  ? perf_trace_lock+0x7a0/0x7a0
[ 2415.573145]  ? debug_smp_processor_id+0x1c/0x20
[ 2415.573163]  ? perf_trace_lock+0x14d/0x7a0
[ 2415.573179]  ? zap_class+0x640/0x640
[ 2415.573213]  ? print_usage_bug+0xc0/0xc0
[ 2415.573244]  ? lock_is_held_type+0x210/0x210
[ 2415.573272]  ? find_held_lock+0x36/0x1c0
[ 2415.573298]  ? mark_held_locks+0xc7/0x130
[ 2415.573315]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2415.573336]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2415.573352]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2415.573370]  ? trace_hardirqs_on+0xbd/0x310
[ 2415.573384]  ? kasan_check_read+0x11/0x20
[ 2415.573399]  ? ___ratelimit+0x3b4/0x672
[ 2415.573417]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2415.635036]  ? trace_hardirqs_on+0x310/0x310
[ 2415.639469]  ? lock_downgrade+0x900/0x900
[ 2415.643632]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2415.648755]  ? ___ratelimit+0x3b9/0x672
[ 2415.652755]  ? idr_get_free+0xf70/0xf70
[ 2415.656770]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2415.661289]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2415.665834]  oom_kill_process.cold.27+0x10/0x903
[ 2415.670606]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2415.675121]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2415.679747]  ? oom_evaluate_task+0x540/0x540
[ 2415.684176]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2415.689733]  ? cgroup_procs_next+0x70/0x70
[ 2415.693990]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2415.698517]  ? oom_badness+0xaa0/0xaa0
[ 2415.702432]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2415.707204]  ? mem_cgroup_iter_break+0x30/0x30
[ 2415.711842]  ? mark_held_locks+0xc7/0x130
[ 2415.716012]  out_of_memory+0xa84/0x1430
[ 2415.720027]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2415.724639]  ? kasan_check_read+0x11/0x20
[ 2415.728852]  ? oom_killer_disable+0x3a0/0x3a0
[ 2415.733437]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2415.738315]  ? memory_oom_group_write+0x160/0x160
[ 2415.743179]  ? mem_cgroup_try_charge+0x627/0xe20
[ 2415.747963]  ? page_counter_try_charge+0x1c1/0x220
[ 2415.747986]  try_charge+0xda9/0x1700
[ 2415.748010]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2415.761604]  ? kasan_check_read+0x11/0x20
[ 2415.763105] syz-executor5 (31157) used greatest stack depth: 7696 bytes left
[ 2415.765830]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2415.765857]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2415.765884]  ? lock_page_memcg+0x350/0x350
[ 2415.787520]  ? lock_acquire+0x1ed/0x520
[ 2415.787539]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2415.787557]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2415.787580]  ? check_preemption_disabled+0x48/0x280
[ 2415.807508]  ? kasan_check_read+0x11/0x20
[ 2415.811665]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2415.816963]  ? rcu_softirq_qs+0x20/0x20
[ 2415.820977]  mem_cgroup_try_charge+0x627/0xe20
[ 2415.825571]  ? __lock_is_held+0xb5/0x140
[ 2415.829658]  ? mem_cgroup_protected+0xa60/0xa60
[ 2415.834374]  ? print_usage_bug+0xc0/0xc0
[ 2415.838468]  ? zap_class+0x640/0x640
[ 2415.842227]  ? find_held_lock+0x36/0x1c0
16:58:16 executing program 5:
r0 = gettid()
unshare(0x28020400)
exit(0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/net\x00')
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)

[ 2415.846341]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2415.851897]  mem_cgroup_try_charge_delay+0x1d/0xa0
[ 2415.851934]  wp_page_copy+0x51d/0x24f0
[ 2415.851954]  ? print_usage_bug+0xc0/0xc0
[ 2415.851968]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2415.851983]  ? kasan_check_read+0x11/0x20
[ 2415.852009]  ? follow_pfn+0x2e0/0x2e0
[ 2415.870183]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2415.883652]  ? reuse_swap_page+0x4bd/0x1520
[ 2415.887999]  ? swp_swapcount+0x530/0x530
[ 2415.892072]  ? __lock_acquire+0x62f/0x4c20
[ 2415.896338]  ? page_add_new_anon_rmap+0xb70/0xb70
[ 2415.901203]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2415.901222]  ? check_preemption_disabled+0x48/0x280
[ 2415.901246]  ? debug_smp_processor_id+0x1c/0x20
[ 2415.901276]  ? perf_trace_lock+0x14d/0x7a0
[ 2415.901302]  ? lock_is_held_type+0x210/0x210
[ 2415.901344]  ? debug_smp_processor_id+0x1c/0x20
[ 2415.911938]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2415.911965]  ? zap_class+0x640/0x640
[ 2415.911982]  ? mark_held_locks+0x130/0x130
[ 2415.912002]  ? zap_class+0x640/0x640
[ 2415.912023]  ? lock_acquire+0x1ed/0x520
[ 2415.912045]  ? find_held_lock+0x36/0x1c0
[ 2415.954654]  ? do_wp_page+0x518/0x2920
[ 2415.958571]  ? lock_downgrade+0x900/0x900
[ 2415.962734]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2415.967076]  ? kasan_check_read+0x11/0x20
[ 2415.971250]  ? do_raw_spin_unlock+0xa7/0x330
[ 2415.975670]  ? do_raw_spin_trylock+0x270/0x270
[ 2415.980262]  ? __pte_alloc_kernel+0x220/0x220
[ 2415.984803]  do_wp_page+0x520/0x2920
[ 2415.988554]  ? finish_mkwrite_fault+0x650/0x650
[ 2415.993248]  ? filemap_map_pages+0xd6b/0x1a20
[ 2415.997758]  ? lock_downgrade+0x900/0x900
[ 2416.001923]  ? check_preemption_disabled+0x48/0x280
[ 2416.006957]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2416.011908]  ? kasan_check_read+0x11/0x20
[ 2416.016088]  ? __lock_acquire+0x62f/0x4c20
[ 2416.020370]  ? mark_held_locks+0x130/0x130
[ 2416.024640]  ? find_get_entries_tag+0x1400/0x1400
[ 2416.029510]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2416.035060]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2416.040645]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2416.046196]  ? check_preemption_disabled+0x48/0x280
[ 2416.051263]  ? debug_smp_processor_id+0x1c/0x20
[ 2416.055948]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2416.060904]  ? lock_is_held_type+0x210/0x210
[ 2416.065351]  ? print_usage_bug+0xc0/0xc0
[ 2416.069450]  ? print_usage_bug+0xc0/0xc0
[ 2416.073552]  ? zap_class+0x640/0x640
[ 2416.077300]  ? __lock_acquire+0x62f/0x4c20
[ 2416.081569]  ? lock_acquire+0x1ed/0x520
[ 2416.085563]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2416.090209]  ? kasan_check_read+0x11/0x20
[ 2416.094365]  ? do_raw_spin_lock+0x14f/0x350
[ 2416.098712]  ? rwlock_bug.part.2+0x90/0x90
[ 2416.102950]  ? do_raw_spin_trylock+0x270/0x270
[ 2416.107557]  __handle_mm_fault+0x3be9/0x5be0
[ 2416.111985]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 2416.116843]  ? lock_is_held_type+0x210/0x210
[ 2416.121286]  ? perf_trace_lock+0x7a0/0x7a0
[ 2416.125550]  ? perf_trace_lock+0x7a0/0x7a0
[ 2416.129826]  ? lock_is_held_type+0x210/0x210
[ 2416.134284]  ? zap_class+0x640/0x640
[ 2416.138009]  ? zap_class+0x640/0x640
[ 2416.141756]  ? find_held_lock+0x36/0x1c0
[ 2416.145846]  ? handle_mm_fault+0x42a/0xc70
[ 2416.150099]  ? lock_downgrade+0x900/0x900
[ 2416.154272]  ? check_preemption_disabled+0x48/0x280
[ 2416.159308]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2416.164258]  ? kasan_check_read+0x11/0x20
[ 2416.168421]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2416.173758]  ? rcu_softirq_qs+0x20/0x20
[ 2416.177766]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2416.182893]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2416.188444]  ? check_preemption_disabled+0x48/0x280
[ 2416.193498]  handle_mm_fault+0x54f/0xc70
[ 2416.197582]  ? __handle_mm_fault+0x5be0/0x5be0
[ 2416.202185]  ? find_vma+0x34/0x190
[ 2416.205760]  __do_page_fault+0x5e8/0xe60
[ 2416.209855]  do_page_fault+0xf2/0x7e0
[ 2416.213676]  ? vmalloc_sync_all+0x30/0x30
[ 2416.217848]  ? error_entry+0x70/0xd0
[ 2416.221575]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2416.226627]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2416.231581]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2416.236432]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2416.241458]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2416.246925]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 2416.252037]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2416.257588]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2416.262713]  ? page_fault+0x8/0x30
[ 2416.266291]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2416.271172]  ? page_fault+0x8/0x30
[ 2416.274724]  page_fault+0x1e/0x30
[ 2416.278184] RIP: 0023:0x807edf7
[ 2416.281491] Code: 02 00 00 85 ff 0f 85 e8 00 00 00 65 8b 0d 08 00 00 00 65 a1 68 00 00 00 39 45 dc 0f 84 24 02 00 00 a1 80 36 46 08 85 c0 74 03 <83> 00 04 65 a1 68 00 00 00 65 a3 6c 00 00 00 0f 31 65 a3 1c 02 00
16:58:16 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x0, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:16 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x0, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2416.300410] RSP: 002b:000000000845fd80 EFLAGS: 00010206
[ 2416.305774] RAX: 00000000084633e8 RBX: 0000000001200011 RCX: 000000000895a900
[ 2416.313056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2416.320342] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2416.327625] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2416.334896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2416.481645] Task in /syz1 killed as a result of limit of /syz1
[ 2416.504912] memory: usage 304904kB, limit 307200kB, failcnt 437
[ 2416.512377] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2416.519386] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2416.525870] Memory cgroup stats for /syz1: cache:16KB rss:269308KB rss_huge:249856KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:269240KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 2416.547383] Memory cgroup out of memory: Kill process 28497 (syz-executor1) score 1106 or sacrifice child
[ 2416.565682] Killed process 28497 (syz-executor1) total-vm:70252kB, anon-rss:2212kB, file-rss:33464kB, shmem-rss:0kB
16:58:16 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:16 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x0, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:16 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x0, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:16 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff0000000000f0ffffffffffff"], 0x14}}, 0x0)

16:58:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001306acf67975e2043300000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c00190018000400f762d9f887497461645ad27e8caab00c20000000"], 0xb}}, 0x0)
r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffff, 0x2)
ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000080))

16:58:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x8000000000000000, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0xffffff80, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0)
write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0)
epoll_create1(0x0)
r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x400000)
r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x103000)
ioctl$VIDIOC_QBUF(r1, 0xc044560f, &(0x7f0000000180)={0x10000, 0xd42979c8ba97f89c, 0x4, 0x0, {0x0, 0x2710}, {0x3, 0xc, 0x9, 0x9, 0x100000000, 0x3, "ace0f739"}, 0x0, 0x3, @planes=&(0x7f0000000140)={0x2, 0x1000, @fd=r2, 0x3f}, 0x4})

16:58:17 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x0, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:17 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x0, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:17 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(0x0, &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:17 executing program 5:
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040))
r0 = getpgid(0x0)
setpgid(0x0, r0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r1=>0x0)
getpgid(r1)
r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000001e80)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001ec0)=0x1c, 0x80800)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001f00), &(0x7f0000001f40)=0xc)

[ 2416.985788] syz-executor1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0
[ 2417.000773] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2417.006136] CPU: 0 PID: 1614 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2417.013427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2417.022776] Call Trace:
[ 2417.025384]  dump_stack+0x244/0x39d
[ 2417.029040]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2417.034258]  ? mark_held_locks+0x130/0x130
[ 2417.038499]  ? mark_held_locks+0x130/0x130
[ 2417.043272]  dump_header+0x27b/0xf72
[ 2417.047008]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.052572]  ? check_preemption_disabled+0x48/0x280
[ 2417.057596]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.063157]  ? pagefault_out_of_memory+0x197/0x197
[ 2417.068101]  ? debug_smp_processor_id+0x1c/0x20
[ 2417.072776]  ? perf_trace_lock+0x14d/0x7a0
[ 2417.077031]  ? debug_smp_processor_id+0x1c/0x20
[ 2417.081720]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2417.086665]  ? lock_is_held_type+0x210/0x210
[ 2417.091089]  ? perf_trace_lock+0x7a0/0x7a0
[ 2417.095339]  ? debug_smp_processor_id+0x1c/0x20
[ 2417.100035]  ? perf_trace_lock+0x14d/0x7a0
[ 2417.104314]  ? zap_class+0x640/0x640
[ 2417.108075]  ? print_usage_bug+0xc0/0xc0
[ 2417.112153]  ? lock_is_held_type+0x210/0x210
[ 2417.116588]  ? find_held_lock+0x36/0x1c0
[ 2417.120674]  ? mark_held_locks+0xc7/0x130
[ 2417.124854]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2417.129966]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2417.135082]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2417.139676]  ? trace_hardirqs_on+0xbd/0x310
[ 2417.144011]  ? kasan_check_read+0x11/0x20
[ 2417.148167]  ? ___ratelimit+0x3b4/0x672
[ 2417.152173]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2417.157288]  ? trace_hardirqs_on+0x310/0x310
[ 2417.161711]  ? lock_downgrade+0x900/0x900
[ 2417.165878]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2417.171014]  ? ___ratelimit+0x3b9/0x672
[ 2417.175046]  ? idr_get_free+0xf70/0xf70
[ 2417.179029]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2417.183524]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2417.188032]  oom_kill_process.cold.27+0x10/0x903
[ 2417.192824]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2417.197324]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2417.201948]  ? oom_evaluate_task+0x540/0x540
[ 2417.206384]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.211927]  ? cgroup_procs_next+0x70/0x70
[ 2417.216172]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2417.220675]  ? oom_badness+0xaa0/0xaa0
[ 2417.224600]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2417.229364]  ? mem_cgroup_iter_break+0x30/0x30
[ 2417.233965]  ? mark_held_locks+0xc7/0x130
[ 2417.238163]  out_of_memory+0xa84/0x1430
[ 2417.242172]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2417.246774]  ? kasan_check_read+0x11/0x20
[ 2417.250933]  ? oom_killer_disable+0x3a0/0x3a0
[ 2417.255468]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2417.260348]  ? memory_oom_group_write+0x160/0x160
[ 2417.265191]  ? memcg_kmem_charge_memcg+0x7c/0x120
[ 2417.270047]  ? page_counter_try_charge+0x1c1/0x220
[ 2417.274985]  try_charge+0xda9/0x1700
[ 2417.278753]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2417.283479]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2417.288417]  ? kasan_check_read+0x11/0x20
[ 2417.292568]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2417.297851]  ? rcu_softirq_qs+0x20/0x20
[ 2417.301871]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2417.307447]  ? lock_page_memcg+0x350/0x350
[ 2417.312158]  ? lock_acquire+0x1ed/0x520
[ 2417.316172]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2417.321542]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.327086]  ? check_preemption_disabled+0x48/0x280
[ 2417.332192]  memcg_kmem_charge_memcg+0x7c/0x120
[ 2417.336881]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 2417.341382]  ? debug_smp_processor_id+0x1c/0x20
[ 2417.346070]  memcg_kmem_charge+0x149/0x350
[ 2417.350319]  __alloc_pages_nodemask+0x75e/0xea0
[ 2417.355015]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[ 2417.360082]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.365652]  ? check_preemption_disabled+0x48/0x280
[ 2417.370708]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.376293]  ? zap_class+0x640/0x640
[ 2417.380037]  ? __lock_is_held+0xb5/0x140
[ 2417.384118]  ? lock_downgrade+0x900/0x900
[ 2417.388272]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2417.393851]  alloc_pages_current+0x173/0x350
[ 2417.398296]  pte_alloc_one+0x1b/0x1a0
[ 2417.402134]  __pte_alloc+0x2a/0x350
[ 2417.405778]  copy_page_range+0x2017/0x2ee0
[ 2417.410083]  ? __pmd_alloc+0x450/0x450
[ 2417.413991]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2417.418879]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2417.423725]  ? __save_stack_trace+0x8d/0xf0
[ 2417.428067]  ? rb_insert_color_cached+0x14b0/0x14b0
[ 2417.433121]  ? check_preemption_disabled+0x48/0x280
[ 2417.438188]  ? debug_smp_processor_id+0x1c/0x20
[ 2417.442885]  ? debug_smp_processor_id+0x1c/0x20
[ 2417.447663]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2417.452607]  ? lock_is_held_type+0x210/0x210
[ 2417.457032]  ? zap_class+0x640/0x640
[ 2417.460769]  ? lock_downgrade+0x900/0x900
[ 2417.464956]  ? zap_class+0x640/0x640
[ 2417.468687]  ? find_held_lock+0x36/0x1c0
[ 2417.472769]  ? copy_process+0x4413/0x87a0
[ 2417.476943]  ? lock_downgrade+0x900/0x900
[ 2417.481127]  ? lock_release+0xa00/0xa00
[ 2417.485110]  ? perf_trace_sched_process_exec+0x860/0x860
[ 2417.490598]  ? dup_userfaultfd+0x6d8/0x890
[ 2417.494880]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2417.499903]  ? vma_compute_subtree_gap+0x160/0x240
[ 2417.504892]  ? validate_mm_rb+0xaa/0xc0
[ 2417.508909]  ? __vma_link_rb+0x26c/0x370
[ 2417.512989]  copy_process+0x45e9/0x87a0
[ 2417.517011]  ? __cleanup_sighand+0x70/0x70
[ 2417.521255]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.526850]  ? check_preemption_disabled+0x48/0x280
[ 2417.531893]  ? find_held_lock+0x36/0x1c0
[ 2417.535969]  ? perf_trace_lock+0x14d/0x7a0
[ 2417.540226]  ? try_to_wake_up+0x11c/0x1490
[ 2417.544472]  ? lock_is_held_type+0x210/0x210
[ 2417.548916]  ? trace_hardirqs_off+0xb8/0x310
[ 2417.553353]  ? kasan_check_read+0x11/0x20
[ 2417.557541]  ? zap_class+0x640/0x640
[ 2417.561277]  ? lock_pin_lock+0x350/0x350
[ 2417.565364]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.570916]  ? find_held_lock+0x36/0x1c0
[ 2417.575047]  ? do_wp_page+0x127c/0x2920
[ 2417.579036]  ? lock_downgrade+0x900/0x900
[ 2417.583215]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2417.587551]  ? perf_trace_lock+0x7a0/0x7a0
[ 2417.591803]  ? kasan_check_read+0x11/0x20
[ 2417.595977]  ? do_raw_spin_unlock+0xa7/0x330
[ 2417.600396]  ? do_raw_spin_trylock+0x270/0x270
[ 2417.604983]  ? pgd_free+0x380/0x380
[ 2417.608646]  ? _raw_spin_unlock+0x2c/0x50
[ 2417.612802]  ? do_wp_page+0x528/0x2920
[ 2417.616711]  ? find_held_lock+0x36/0x1c0
[ 2417.620797]  ? finish_mkwrite_fault+0x650/0x650
[ 2417.625487]  ? __lock_acquire+0x62f/0x4c20
[ 2417.629746]  ? mark_held_locks+0x130/0x130
[ 2417.633985]  ? lock_downgrade+0x900/0x900
[ 2417.638220]  ? __lock_acquire+0x62f/0x4c20
[ 2417.642461]  ? __lock_acquire+0x62f/0x4c20
[ 2417.646699]  ? perf_trace_lock+0x14d/0x7a0
[ 2417.650944]  ? debug_smp_processor_id+0x1c/0x20
[ 2417.655641]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2417.660591]  ? mark_held_locks+0x130/0x130
[ 2417.664849]  ? perf_trace_lock+0x14d/0x7a0
[ 2417.669090]  ? debug_smp_processor_id+0x1c/0x20
[ 2417.673782]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.679348]  ? check_preemption_disabled+0x48/0x280
[ 2417.684378]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.689941]  ? check_preemption_disabled+0x48/0x280
[ 2417.694976]  ? __lock_is_held+0xb5/0x140
[ 2417.699057]  ? print_usage_bug+0xc0/0xc0
[ 2417.703157]  ? print_usage_bug+0xc0/0xc0
[ 2417.707230]  ? find_held_lock+0x36/0x1c0
[ 2417.711334]  ? __lock_acquire+0x62f/0x4c20
[ 2417.715576]  ? zap_class+0x640/0x640
[ 2417.719313]  ? ktime_get_coarse_real_ts64+0x273/0x370
[ 2417.724527]  ? mark_held_locks+0x130/0x130
[ 2417.728870]  ? lock_acquire+0x1ed/0x520
[ 2417.732884]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2417.737481]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.743031]  ? check_preemption_disabled+0x48/0x280
[ 2417.748071]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.753653]  ? check_preemption_disabled+0x48/0x280
[ 2417.758681]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.764244]  ? debug_smp_processor_id+0x1c/0x20
[ 2417.768915]  ? perf_trace_lock+0x14d/0x7a0
[ 2417.773182]  ? debug_smp_processor_id+0x1c/0x20
[ 2417.777873]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2417.782860]  ? lock_is_held_type+0x210/0x210
[ 2417.787280]  ? perf_trace_lock+0x7a0/0x7a0
[ 2417.791537]  ? zap_class+0x640/0x640
[ 2417.795278]  ? zap_class+0x640/0x640
[ 2417.799019]  ? lock_is_held_type+0x210/0x210
[ 2417.803432]  ? perf_trace_lock+0x7a0/0x7a0
[ 2417.807683]  ? find_held_lock+0x36/0x1c0
[ 2417.811764]  _do_fork+0x1cb/0x11d0
[ 2417.815314]  ? fork_idle+0x1d0/0x1d0
[ 2417.819029]  ? __do_page_fault+0x620/0xe60
[ 2417.823286]  ? kasan_check_read+0x11/0x20
[ 2417.827443]  ? _copy_to_user+0xc8/0x110
[ 2417.831424]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2417.836969]  ? put_old_timespec32+0x110/0x280
[ 2417.841524]  ? get_old_timespec32+0x2a0/0x2a0
[ 2417.846060]  ? do_fast_syscall_32+0x150/0xfb2
[ 2417.850562]  ? do_fast_syscall_32+0x150/0xfb2
[ 2417.855066]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2417.859689]  ? trace_hardirqs_on+0xbd/0x310
[ 2417.864099]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.869658]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2417.874263]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2417.879372]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2417.884925]  __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2417.889960]  do_fast_syscall_32+0x34d/0xfb2
[ 2417.894304]  ? do_int80_syscall_32+0x890/0x890
[ 2417.898897]  ? entry_SYSENTER_compat+0x68/0x7f
[ 2417.903493]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2417.908517]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2417.913370]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2417.918231]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2417.923277]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2417.928309]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2417.933173]  entry_SYSENTER_compat+0x70/0x7f
[ 2417.937585] RIP: 0023:0xf7fb2a29
[ 2417.940959] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 2417.959860] RSP: 002b:000000000845fd70 EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[ 2417.967569] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000
[ 2417.974860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000895a968
[ 2417.982146] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
16:58:18 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0185649, &(0x7f0000000200)={0x0, 0xecb5, 0x577e, [], &(0x7f0000000140)={0x990a6d, 0x7, [], @string=&(0x7f0000000100)=0xd1b}})
sendmmsg$inet_sctp(r1, &(0x7f0000006f80)=[{&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000000)="92", 0x1}], 0x1}], 0x1, 0x5)

16:58:18 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0x0, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2417.989434] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2417.996705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2418.013429] Task in /syz1 killed as a result of limit of /syz1
[ 2418.019485] memory: usage 307172kB, limit 307200kB, failcnt 462
[ 2418.025716] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
16:58:18 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x0, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2418.046036] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2418.061377] Memory cgroup stats for /syz1: cache:16KB rss:271196KB rss_huge:251904KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:271392KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 2418.083366] Memory cgroup out of memory: Kill process 31209 (syz-executor1) score 1106 or sacrifice child
[ 2418.093380] Killed process 31209 (syz-executor1) total-vm:71148kB, anon-rss:2220kB, file-rss:33652kB, shmem-rss:0kB
16:58:18 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x8000, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil})
r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x1)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={<r2=>0x0, 0x100}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="be0b722e057bad7f5209656d8b03"], &(0x7f0000000200)=0x12)
ioctl$KVM_SET_CPUID(r0, 0xc0105512, &(0x7f00000003c0)={0x6, 0x5516, [{0xbfffffff, 0x0, 0x8, 0xdf, 0xfffffffffffffff8}]})
prctl$PR_GET_TSC(0x19, &(0x7f0000000000))
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x3, 0xfffffffffffffffd, 0x7fff, 0x100000001})

16:58:18 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x300004)
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', "0000008000008000"}, &(0x7f0000000080)='^\x00', 0x2, 0x2)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)="000000800000800000")

16:58:18 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000200000000000000"], 0x14}}, 0x0)

16:58:18 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:18 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0x0, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0xfffffffffffffffc, 0x0)
recvfrom$inet6(r1, &(0x7f0000000200)=""/4096, 0x1000, 0x40000002, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x493}, 0x1c)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x2, 0x9, 0xbd05, 0x1f, 0xfff, 0x8})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000000d000040050004a900000000c1eb000000000d4000000000010000000000000025000000fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008d1d4400000000000000000000000000"])
getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0xfffffffffffffcdc)

16:58:18 executing program 3:
r0 = socket$inet6(0xa, 0xfffffffffffffffc, 0xb53)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000980)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0000ae982640d0e6bb51ff07000000000000aa319198e91f0a4d43697c2bcdf94edcc5a22a138ff33bd66432ebe5140e8bdab7fc3968286d6627a1397193227d4733c145e66536c6c275112560e72b3097843b5cdac480c3a8145473cbde841dc7cc3bb138")
sendfile(r0, r1, &(0x7f00000000c0), 0x5a)

[ 2418.359017] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0
[ 2418.457780] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2418.473404] CPU: 1 PID: 31272 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2418.480774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2418.490129] Call Trace:
[ 2418.492723]  dump_stack+0x244/0x39d
[ 2418.496358]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2418.501554]  ? mark_held_locks+0x130/0x130
[ 2418.505787]  ? mark_held_locks+0x130/0x130
[ 2418.510041]  dump_header+0x27b/0xf72
[ 2418.513769]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2418.519312]  ? check_preemption_disabled+0x48/0x280
[ 2418.524359]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2418.529902]  ? pagefault_out_of_memory+0x197/0x197
[ 2418.534841]  ? debug_smp_processor_id+0x1c/0x20
[ 2418.539510]  ? perf_trace_lock+0x14d/0x7a0
[ 2418.543757]  ? debug_smp_processor_id+0x1c/0x20
[ 2418.548440]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2418.553376]  ? lock_is_held_type+0x210/0x210
[ 2418.557783]  ? perf_trace_lock+0x7a0/0x7a0
[ 2418.562026]  ? debug_smp_processor_id+0x1c/0x20
[ 2418.566739]  ? perf_trace_lock+0x14d/0x7a0
[ 2418.570975]  ? zap_class+0x640/0x640
[ 2418.574692]  ? print_usage_bug+0xc0/0xc0
[ 2418.578765]  ? lock_is_held_type+0x210/0x210
[ 2418.583187]  ? find_held_lock+0x36/0x1c0
[ 2418.587324]  ? mark_held_locks+0xc7/0x130
[ 2418.591476]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2418.596576]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2418.601678]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2418.606261]  ? trace_hardirqs_on+0xbd/0x310
[ 2418.610611]  ? kasan_check_read+0x11/0x20
[ 2418.614754]  ? ___ratelimit+0x3b4/0x672
[ 2418.618725]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2418.623837]  ? trace_hardirqs_on+0x310/0x310
[ 2418.628268]  ? lock_downgrade+0x900/0x900
[ 2418.632420]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2418.637519]  ? ___ratelimit+0x3b9/0x672
[ 2418.641496]  ? idr_get_free+0xf70/0xf70
[ 2418.645468]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2418.649963]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2418.654468]  oom_kill_process.cold.27+0x10/0x903
[ 2418.659242]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2418.663743]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2418.668337]  ? oom_evaluate_task+0x540/0x540
[ 2418.672747]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2418.678286]  ? cgroup_procs_next+0x70/0x70
[ 2418.682527]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2418.687035]  ? oom_badness+0xaa0/0xaa0
[ 2418.690977]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2418.695741]  ? mem_cgroup_iter_break+0x30/0x30
[ 2418.700342]  ? mark_held_locks+0xc7/0x130
[ 2418.704493]  out_of_memory+0xa84/0x1430
[ 2418.708467]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2418.713052]  ? kasan_check_read+0x11/0x20
[ 2418.717259]  ? oom_killer_disable+0x3a0/0x3a0
[ 2418.721772]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2418.726650]  ? memory_oom_group_write+0x160/0x160
[ 2418.731493]  ? mem_cgroup_try_charge+0x627/0xe20
[ 2418.736258]  ? page_counter_try_charge+0x1c1/0x220
[ 2418.741225]  try_charge+0xda9/0x1700
[ 2418.744938]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2418.749874]  ? kasan_check_read+0x11/0x20
[ 2418.754038]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2418.758715]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2418.764281]  ? lock_page_memcg+0x350/0x350
[ 2418.768521]  ? lock_acquire+0x1ed/0x520
[ 2418.772493]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2418.777855]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2418.783393]  ? check_preemption_disabled+0x48/0x280
[ 2418.788429]  ? kasan_check_read+0x11/0x20
[ 2418.792590]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2418.797863]  ? rcu_softirq_qs+0x20/0x20
[ 2418.801855]  mem_cgroup_try_charge+0x627/0xe20
[ 2418.806439]  ? mem_cgroup_protected+0xa60/0xa60
[ 2418.811136]  ? wp_page_copy+0xf15/0x24f0
[ 2418.815228]  ? lock_downgrade+0x900/0x900
[ 2418.819395]  ? do_raw_spin_unlock+0xa7/0x330
[ 2418.823800]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2418.829378]  mem_cgroup_try_charge_delay+0x1d/0xa0
[ 2418.834304]  wp_page_copy+0x51d/0x24f0
[ 2418.838192]  ? print_usage_bug+0xc0/0xc0
[ 2418.842307]  ? follow_pfn+0x2e0/0x2e0
[ 2418.846118]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2418.851651]  ? reuse_swap_page+0x4bd/0x1520
[ 2418.855978]  ? swp_swapcount+0x530/0x530
[ 2418.860055]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2418.865624]  ? check_preemption_disabled+0x48/0x280
[ 2418.870636]  ? __lock_acquire+0x62f/0x4c20
[ 2418.874875]  ? debug_smp_processor_id+0x1c/0x20
[ 2418.879539]  ? perf_trace_lock+0x14d/0x7a0
[ 2418.883831]  ? lock_is_held_type+0x210/0x210
[ 2418.888260]  ? debug_smp_processor_id+0x1c/0x20
[ 2418.892959]  ? perf_trace_lock+0x14d/0x7a0
[ 2418.897210]  ? debug_smp_processor_id+0x1c/0x20
[ 2418.901879]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2418.906818]  ? zap_class+0x640/0x640
[ 2418.910531]  ? check_preemption_disabled+0x48/0x280
[ 2418.915571]  ? debug_smp_processor_id+0x1c/0x20
[ 2418.920266]  ? find_held_lock+0x36/0x1c0
[ 2418.924337]  ? do_wp_page+0x518/0x2920
[ 2418.928237]  ? lock_downgrade+0x900/0x900
[ 2418.932393]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2418.936715]  ? kasan_check_read+0x11/0x20
[ 2418.940870]  ? do_raw_spin_unlock+0xa7/0x330
[ 2418.945275]  ? do_raw_spin_trylock+0x270/0x270
[ 2418.949855]  ? __pte_alloc_kernel+0x220/0x220
[ 2418.954360]  ? check_preemption_disabled+0x48/0x280
[ 2418.959383]  do_wp_page+0x520/0x2920
[ 2418.963103]  ? finish_mkwrite_fault+0x650/0x650
[ 2418.967790]  ? print_usage_bug+0xc0/0xc0
[ 2418.971891]  ? __lock_acquire+0x62f/0x4c20
[ 2418.976140]  ? __lock_acquire+0x62f/0x4c20
[ 2418.980395]  ? mark_held_locks+0x130/0x130
[ 2418.984647]  ? debug_smp_processor_id+0x1c/0x20
[ 2418.989323]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2418.994880]  ? check_preemption_disabled+0x48/0x280
[ 2418.999908]  ? debug_smp_processor_id+0x1c/0x20
[ 2419.004583]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2419.009515]  ? check_preemption_disabled+0x48/0x280
[ 2419.014532]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2419.020081]  ? print_usage_bug+0xc0/0xc0
[ 2419.024155]  ? print_usage_bug+0xc0/0xc0
[ 2419.028210]  ? debug_smp_processor_id+0x1c/0x20
[ 2419.032877]  ? perf_trace_lock+0x14d/0x7a0
[ 2419.037130]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2419.042063]  ? print_usage_bug+0xc0/0xc0
[ 2419.046153]  ? zap_class+0x640/0x640
[ 2419.049912]  ? __lock_acquire+0x62f/0x4c20
[ 2419.054205]  ? lock_acquire+0x1ed/0x520
[ 2419.058177]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2419.062765]  ? kasan_check_read+0x11/0x20
[ 2419.066922]  ? do_raw_spin_lock+0x14f/0x350
[ 2419.071256]  ? rwlock_bug.part.2+0x90/0x90
[ 2419.075503]  __handle_mm_fault+0x3be9/0x5be0
[ 2419.079934]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 2419.084774]  ? lock_is_held_type+0x210/0x210
[ 2419.089184]  ? perf_trace_lock+0x7a0/0x7a0
[ 2419.093414]  ? perf_trace_lock+0x7a0/0x7a0
[ 2419.097646]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2419.102591]  ? zap_class+0x640/0x640
[ 2419.106324]  ? zap_class+0x640/0x640
[ 2419.110044]  ? find_held_lock+0x36/0x1c0
[ 2419.114117]  ? handle_mm_fault+0x42a/0xc70
[ 2419.118385]  ? lock_downgrade+0x900/0x900
[ 2419.122548]  ? check_preemption_disabled+0x48/0x280
[ 2419.127568]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2419.132493]  ? kasan_check_read+0x11/0x20
[ 2419.136639]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2419.141943]  ? rcu_softirq_qs+0x20/0x20
[ 2419.145951]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2419.151060]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2419.156602]  ? check_preemption_disabled+0x48/0x280
[ 2419.161641]  handle_mm_fault+0x54f/0xc70
[ 2419.165706]  ? __handle_mm_fault+0x5be0/0x5be0
[ 2419.170298]  ? find_vma+0x34/0x190
[ 2419.173853]  __do_page_fault+0x5e8/0xe60
[ 2419.177942]  do_page_fault+0xf2/0x7e0
[ 2419.181743]  ? vmalloc_sync_all+0x30/0x30
[ 2419.185898]  ? error_entry+0x70/0xd0
[ 2419.189614]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2419.194628]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2419.199559]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2419.204412]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2419.209441]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2419.214898]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2419.219917]  ? page_fault+0x8/0x30
[ 2419.223460]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2419.228327]  ? page_fault+0x8/0x30
[ 2419.231868]  page_fault+0x1e/0x30
[ 2419.235316] RIP: 0023:0x8052230
[ 2419.238613] Code: a1 68 4d 12 08 a3 70 4d 12 08 8d 45 60 a3 34 00 46 08 8b 4d 64 8b 55 60 89 4a 04 8b 4d 64 89 11 c7 05 34 00 46 08 00 00 00 00 <c7> 05 6c 4d 12 08 68 4d 12 08 31 d2 c7 05 68 4d 12 08 68 4d 12 08
16:58:19 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff00000000fffffff000000000"], 0x14}}, 0x0)

16:58:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x80003, 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0xe5b, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00')

[ 2419.257573] RSP: 002b:000000000845fd60 EFLAGS: 00010246
[ 2419.262933] RAX: 000000000895a960 RBX: 0000000008124d68 RCX: 000000000846002c
[ 2419.270236] RDX: 000000000846002c RSI: 000000000845fd80 RDI: 0000000000000000
[ 2419.277503] RBP: 000000000895a900 R08: 0000000000000000 R09: 0000000000000000
[ 2419.284774] R10: 0000000000000000 R11: 0000000000000216 R12: 0000000000000000
[ 2419.292046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:58:19 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@loopback, @multicast2}, &(0x7f0000000240)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000c80)={0x1, 'ep0\x00', 0x2}, 0x18)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
shutdown(r0, 0x3)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/ppp\x00', 0x4000, 0x0)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000340))
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8)
openat$cgroup_type(r1, &(0x7f0000000300)='cgroup.type\x00', 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000540)=0xfb, 0x11b1c134bb1f847)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000180)=0x235)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000880)={"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"})
unshare(0x40000000)

[ 2419.381702] Task in /syz1 killed as a result of limit of /syz1
[ 2419.388216] memory: usage 307200kB, limit 307200kB, failcnt 480
16:58:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1000000084, 0x0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e23, @rand_addr=0x7}, {0x307, @remote}, 0x66, {0x2, 0x4e23}, 'bridge_slave_0\x00'})
ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000080)={0x0, 0x0, 0x94ac})
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'})
ioctl$UI_SET_EVBIT(r0, 0x40045568, 0x0)

[ 2419.438099] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2419.458060] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2419.480639] Memory cgroup stats for /syz1: cache:16KB rss:271292KB rss_huge:251904KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:271396KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 2419.542263] Memory cgroup out of memory: Kill process 27270 (syz-executor1) score 1106 or sacrifice child
[ 2419.562842] Killed process 27270 (syz-executor1) total-vm:70252kB, anon-rss:2208kB, file-rss:33464kB, shmem-rss:0kB
[ 2419.590653] oom_reaper: reaped process 27270 (syz-executor1), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB
[ 2419.604434] Unknown ioctl 35156
[ 2419.613079] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0
[ 2419.651269] syz-executor2 cpuset=syz2 mems_allowed=0
[ 2419.656470] CPU: 0 PID: 31274 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #255
[ 2419.663858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2419.663866] Call Trace:
[ 2419.663890]  dump_stack+0x244/0x39d
[ 2419.663915]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2419.663938]  ? mark_held_locks+0x130/0x130
[ 2419.663954]  ? mark_held_locks+0x130/0x130
[ 2419.663976]  dump_header+0x27b/0xf72
16:58:19 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff00000000f000000000000000"], 0x14}}, 0x0)

[ 2419.696906]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2419.702460]  ? check_preemption_disabled+0x48/0x280
[ 2419.707503]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2419.713053]  ? pagefault_out_of_memory+0x197/0x197
[ 2419.717989]  ? debug_smp_processor_id+0x1c/0x20
[ 2419.722688]  ? perf_trace_lock+0x14d/0x7a0
[ 2419.726940]  ? debug_smp_processor_id+0x1c/0x20
[ 2419.731621]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2419.731645]  ? lock_is_held_type+0x210/0x210
[ 2419.731665]  ? perf_trace_lock+0x7a0/0x7a0
[ 2419.731687]  ? debug_smp_processor_id+0x1c/0x20
[ 2419.731703]  ? perf_trace_lock+0x14d/0x7a0
[ 2419.731719]  ? zap_class+0x640/0x640
[ 2419.731739]  ? print_usage_bug+0xc0/0xc0
[ 2419.741062]  ? lock_is_held_type+0x210/0x210
[ 2419.741095]  ? find_held_lock+0x36/0x1c0
[ 2419.741124]  ? mark_held_locks+0xc7/0x130
[ 2419.741147]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2419.756621] input: ¬” as /devices/virtual/input/input1850
[ 2419.757957]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2419.757975]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2419.757993]  ? trace_hardirqs_on+0xbd/0x310
16:58:20 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2419.758009]  ? kasan_check_read+0x11/0x20
[ 2419.758022]  ? ___ratelimit+0x3b4/0x672
[ 2419.758041]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2419.766501]  ? trace_hardirqs_on+0x310/0x310
[ 2419.766517]  ? lock_downgrade+0x900/0x900
[ 2419.766536]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2419.766551]  ? ___ratelimit+0x3b9/0x672
[ 2419.795007]  ? idr_get_free+0xf70/0xf70
[ 2419.795020]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2419.795033]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2419.795057]  oom_kill_process.cold.27+0x10/0x903
[ 2419.795090]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2419.795122]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2419.826248]  ? oom_evaluate_task+0x540/0x540
[ 2419.834179]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2419.834198]  ? cgroup_procs_next+0x70/0x70
[ 2419.834216]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2419.834235]  ? oom_badness+0xaa0/0xaa0
[ 2419.843219]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2419.843237]  ? mem_cgroup_iter_break+0x30/0x30
[ 2419.843267]  ? mark_held_locks+0xc7/0x130
[ 2419.843288]  out_of_memory+0xa84/0x1430
[ 2419.852510]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2419.852528]  ? kasan_check_read+0x11/0x20
[ 2419.852544]  ? oom_killer_disable+0x3a0/0x3a0
[ 2419.852579]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2419.880625] Unknown ioctl 35156
[ 2419.884391]  ? memory_oom_group_write+0x160/0x160
[ 2419.884405]  ? mem_cgroup_try_charge+0x627/0xe20
[ 2419.884428]  ? page_counter_try_charge+0x1c1/0x220
[ 2419.884447]  try_charge+0xda9/0x1700
[ 2419.884462]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2419.884482]  ? kasan_check_read+0x11/0x20
[ 2419.945719]  ? mem_cgroup_from_task+0x1f0/0x1f0
16:58:20 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2419.950407]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2419.955964]  ? lock_page_memcg+0x350/0x350
[ 2419.955989]  ? lock_acquire+0x1ed/0x520
[ 2419.956011]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2419.969585]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2419.969604]  ? check_preemption_disabled+0x48/0x280
[ 2419.969627]  ? kasan_check_read+0x11/0x20
[ 2419.969644]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2419.969660]  ? rcu_softirq_qs+0x20/0x20
[ 2419.984370]  mem_cgroup_try_charge+0x627/0xe20
[ 2419.984396]  ? mem_cgroup_protected+0xa60/0xa60
[ 2419.984417]  ? print_usage_bug+0xc0/0xc0
[ 2419.984438]  ? __mod_zone_page_state+0x8a/0xf0
[ 2419.993696]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2419.993713]  ? isolate_lru_pages.isra.58+0xc7d/0x19e0
[ 2419.993757]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2419.993782]  mem_cgroup_try_charge_delay+0x1d/0xa0
[ 2420.011649]  wp_page_copy+0x51d/0x24f0
[ 2420.011671]  ? print_usage_bug+0xc0/0xc0
[ 2420.011713]  ? follow_pfn+0x2e0/0x2e0
[ 2420.011733]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2420.011750]  ? reuse_swap_page+0x4bd/0x1520
[ 2420.028007]  ? swp_swapcount+0x530/0x530
[ 2420.028030]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2420.028048]  ? check_preemption_disabled+0x48/0x280
[ 2420.028064]  ? __lock_acquire+0x62f/0x4c20
[ 2420.028085]  ? debug_smp_processor_id+0x1c/0x20
[ 2420.036900]  ? perf_trace_lock+0x14d/0x7a0
[ 2420.036929]  ? lock_is_held_type+0x210/0x210
[ 2420.036951]  ? debug_smp_processor_id+0x1c/0x20
[ 2420.036969]  ? print_usage_bug+0xc0/0xc0
[ 2420.095471]  ? perf_trace_lock_acquire+0x15b/0x800
16:58:20 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff00000000c00e000000000000"], 0x14}}, 0x0)

[ 2420.100433]  ? zap_class+0x640/0x640
[ 2420.104158]  ? check_preemption_disabled+0x48/0x280
[ 2420.109191]  ? debug_smp_processor_id+0x1c/0x20
[ 2420.113920]  ? find_held_lock+0x36/0x1c0
[ 2420.118006]  ? do_wp_page+0x518/0x2920
[ 2420.121917]  ? lock_downgrade+0x900/0x900
[ 2420.126080]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2420.130420]  ? kasan_check_read+0x11/0x20
[ 2420.134581]  ? do_raw_spin_unlock+0xa7/0x330
[ 2420.139003]  ? do_raw_spin_trylock+0x270/0x270
[ 2420.143599]  ? __pte_alloc_kernel+0x220/0x220
[ 2420.148103]  ? check_preemption_disabled+0x48/0x280
[ 2420.148135]  do_wp_page+0x520/0x2920
[ 2420.148164]  ? finish_mkwrite_fault+0x650/0x650
[ 2420.148189]  ? print_usage_bug+0xc0/0xc0
[ 2420.156902]  ? __lock_acquire+0x62f/0x4c20
[ 2420.156934]  ? __lock_acquire+0x62f/0x4c20
[ 2420.156976]  ? mark_held_locks+0x130/0x130
[ 2420.178403]  ? debug_smp_processor_id+0x1c/0x20
[ 2420.183094]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2420.188665]  ? check_preemption_disabled+0x48/0x280
[ 2420.193705]  ? debug_smp_processor_id+0x1c/0x20
[ 2420.198411]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2420.203358]  ? check_preemption_disabled+0x48/0x280
[ 2420.208388]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2420.213989]  ? print_usage_bug+0xc0/0xc0
[ 2420.218071]  ? print_usage_bug+0xc0/0xc0
[ 2420.222163]  ? debug_smp_processor_id+0x1c/0x20
[ 2420.226871]  ? perf_trace_lock+0x14d/0x7a0
[ 2420.231120]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2420.236085]  ? print_usage_bug+0xc0/0xc0
[ 2420.240153]  ? zap_class+0x640/0x640
[ 2420.243887]  ? __lock_acquire+0x62f/0x4c20
[ 2420.248151]  ? lock_acquire+0x1ed/0x520
[ 2420.252137]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2420.256764]  ? kasan_check_read+0x11/0x20
[ 2420.260935]  ? do_raw_spin_lock+0x14f/0x350
[ 2420.265264]  ? rwlock_bug.part.2+0x90/0x90
[ 2420.269529]  __handle_mm_fault+0x3be9/0x5be0
[ 2420.273957]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 2420.278823]  ? lock_is_held_type+0x210/0x210
[ 2420.283262]  ? perf_trace_lock+0x7a0/0x7a0
[ 2420.287512]  ? perf_trace_lock+0x7a0/0x7a0
[ 2420.291759]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2420.296723]  ? zap_class+0x640/0x640
[ 2420.300443]  ? zap_class+0x640/0x640
[ 2420.304174]  ? find_held_lock+0x36/0x1c0
[ 2420.308254]  ? handle_mm_fault+0x42a/0xc70
[ 2420.312939]  ? lock_downgrade+0x900/0x900
[ 2420.317092]  ? check_preemption_disabled+0x48/0x280
[ 2420.322121]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2420.327054]  ? kasan_check_read+0x11/0x20
[ 2420.331210]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2420.336505]  ? rcu_softirq_qs+0x20/0x20
[ 2420.340494]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2420.345618]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2420.351174]  ? check_preemption_disabled+0x48/0x280
[ 2420.356203]  handle_mm_fault+0x54f/0xc70
[ 2420.360272]  ? __handle_mm_fault+0x5be0/0x5be0
[ 2420.364880]  ? find_vma+0x34/0x190
[ 2420.368437]  __do_page_fault+0x5e8/0xe60
[ 2420.372513]  do_page_fault+0xf2/0x7e0
[ 2420.376335]  ? vmalloc_sync_all+0x30/0x30
[ 2420.380508]  ? error_entry+0x70/0xd0
[ 2420.384235]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2420.389283]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2420.394217]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2420.399066]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2420.404088]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2420.409553]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2420.414572]  ? page_fault+0x8/0x30
[ 2420.418120]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2420.422972]  ? page_fault+0x8/0x30
[ 2420.426569]  page_fault+0x1e/0x30
[ 2420.430042] RIP: 0023:0x807ee2c
[ 2420.433341] Code: 6c 00 00 00 0f 31 65 a3 1c 02 00 00 65 89 15 20 02 00 00 a3 b8 36 46 08 b8 20 60 05 08 89 15 bc 36 46 08 85 c0 74 0c 83 ec 0c <51> e8 ee 71 fd ff 83 c4 10 8b 45 e4 85 c0 0f 85 48 01 00 00 8b 75
[ 2420.452254] RSP: 002b:000000000845fd74 EFLAGS: 00010216
[ 2420.457618] RAX: 0000000008056020 RBX: 0000000001200011 RCX: 000000000974c900
[ 2420.464889] RDX: 0000000000000511 RSI: 0000000000000000 RDI: 0000000000000000
[ 2420.472171] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2420.479433] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2420.486712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:58:20 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0xe2801, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000280)={0x1e00, 0x80000})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

[ 2420.545669] Task in /syz2 killed as a result of limit of /syz2
[ 2420.551912] memory: usage 307200kB, limit 307200kB, failcnt 101
[ 2420.571339] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2420.578122] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2420.601145] Memory cgroup stats for /syz2: cache:16496KB rss:262304KB rss_huge:247808KB shmem:16404KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:16396KB active_anon:262380KB inactive_file:4KB active_file:0KB unevictable:0KB
[ 2420.651473] Memory cgroup out of memory: Kill process 27502 (syz-executor2) score 1106 or sacrifice child
[ 2420.671264] Killed process 27502 (syz-executor2) total-vm:71148kB, anon-rss:2220kB, file-rss:33680kB, shmem-rss:0kB
[ 2420.696935] oom_reaper: reaped process 27502 (syz-executor2), now anon-rss:0kB, file-rss:32820kB, shmem-rss:0kB
[ 2420.708912] syz-executor1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0
[ 2420.738557] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2420.751601] CPU: 1 PID: 1614 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2420.758884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2420.768235] Call Trace:
[ 2420.770836]  dump_stack+0x244/0x39d
[ 2420.774493]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2420.779691]  ? mark_held_locks+0x130/0x130
[ 2420.783964]  ? mark_held_locks+0x130/0x130
[ 2420.788245]  dump_header+0x27b/0xf72
[ 2420.791969]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2420.797516]  ? check_preemption_disabled+0x48/0x280
[ 2420.802540]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2420.808099]  ? pagefault_out_of_memory+0x197/0x197
[ 2420.810000] IPVS: ftp: loaded support on port[0] = 21
[ 2420.813037]  ? debug_smp_processor_id+0x1c/0x20
[ 2420.813054]  ? perf_trace_lock+0x14d/0x7a0
[ 2420.813085]  ? debug_smp_processor_id+0x1c/0x20
[ 2420.813101]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2420.813138]  ? lock_is_held_type+0x210/0x210
[ 2420.813171]  ? perf_trace_lock+0x7a0/0x7a0
[ 2420.813189]  ? debug_smp_processor_id+0x1c/0x20
[ 2420.831930]  ? perf_trace_lock+0x14d/0x7a0
[ 2420.831945]  ? zap_class+0x640/0x640
[ 2420.831961]  ? print_usage_bug+0xc0/0xc0
[ 2420.831975]  ? lock_is_held_type+0x210/0x210
[ 2420.832001]  ? find_held_lock+0x36/0x1c0
[ 2420.832023]  ? mark_held_locks+0xc7/0x130
[ 2420.841374]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2420.841387]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2420.841402]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2420.841418]  ? trace_hardirqs_on+0xbd/0x310
[ 2420.841432]  ? kasan_check_read+0x11/0x20
[ 2420.841448]  ? ___ratelimit+0x3b4/0x672
[ 2420.850367]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2420.858295]  ? trace_hardirqs_on+0x310/0x310
[ 2420.858311]  ? lock_downgrade+0x900/0x900
[ 2420.858337]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2420.866772]  ? ___ratelimit+0x3b9/0x672
[ 2420.866790]  ? idr_get_free+0xf70/0xf70
[ 2420.866802]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2420.866823]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2420.866847]  oom_kill_process.cold.27+0x10/0x903
[ 2420.875041]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2420.875058]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2420.875082]  ? oom_evaluate_task+0x540/0x540
[ 2420.885256]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2420.885276]  ? cgroup_procs_next+0x70/0x70
[ 2420.885294]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2420.894171]  ? oom_badness+0xaa0/0xaa0
[ 2420.894189]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2420.894205]  ? mem_cgroup_iter_break+0x30/0x30
[ 2420.894235]  ? mark_held_locks+0xc7/0x130
[ 2420.894254]  out_of_memory+0xa84/0x1430
[ 2420.894268]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2420.894286]  ? kasan_check_read+0x11/0x20
[ 2420.894324]  ? oom_killer_disable+0x3a0/0x3a0
[ 2420.894362]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2420.916074]  ? memory_oom_group_write+0x160/0x160
[ 2420.916088]  ? memcg_kmem_charge_memcg+0x7c/0x120
[ 2420.916125]  ? page_counter_try_charge+0x1c1/0x220
[ 2420.925188]  try_charge+0xda9/0x1700
[ 2420.925220]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2420.933748]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2420.933778]  ? kasan_check_read+0x11/0x20
[ 2420.933796]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2420.943037]  ? rcu_softirq_qs+0x20/0x20
[ 2420.943066]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2420.943086]  ? lock_page_memcg+0x350/0x350
[ 2420.943122]  ? lock_acquire+0x1ed/0x520
[ 2420.943138]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2420.943153]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2420.943185]  ? check_preemption_disabled+0x48/0x280
[ 2420.966412]  memcg_kmem_charge_memcg+0x7c/0x120
[ 2420.966428]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 2420.966445]  ? debug_smp_processor_id+0x1c/0x20
[ 2420.966465]  memcg_kmem_charge+0x149/0x350
[ 2420.974856]  __alloc_pages_nodemask+0x75e/0xea0
[ 2420.974897]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[ 2420.974917]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2420.974937]  ? check_preemption_disabled+0x48/0x280
[ 2420.984246]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2420.984278]  ? zap_class+0x640/0x640
[ 2420.984313]  ? __lock_is_held+0xb5/0x140
[ 2420.984332]  ? lock_downgrade+0x900/0x900
[ 2420.984350]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2420.984372]  alloc_pages_current+0x173/0x350
[ 2420.992471]  pte_alloc_one+0x1b/0x1a0
[ 2420.992490]  __pte_alloc+0x2a/0x350
[ 2420.992511]  copy_page_range+0x2017/0x2ee0
[ 2420.992570]  ? __pmd_alloc+0x450/0x450
[ 2420.992587]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2420.992619]  ? unwind_get_return_address+0x61/0xa0
[ 2421.001337]  ? __save_stack_trace+0x8d/0xf0
[ 2421.001373]  ? rb_insert_color_cached+0x14b0/0x14b0
[ 2421.001391]  ? check_preemption_disabled+0x48/0x280
[ 2421.001430]  ? debug_smp_processor_id+0x1c/0x20
[ 2421.001454]  ? debug_smp_processor_id+0x1c/0x20
[ 2421.010792]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2421.020479]  ? lock_is_held_type+0x210/0x210
[ 2421.020522]  ? zap_class+0x640/0x640
[ 2421.020540]  ? lock_downgrade+0x900/0x900
[ 2421.033830]  ? zap_class+0x640/0x640
[ 2421.033852]  ? zap_class+0x640/0x640
[ 2421.033873]  ? find_held_lock+0x36/0x1c0
[ 2421.033900]  ? copy_process+0x4413/0x87a0
[ 2421.033916]  ? lock_downgrade+0x900/0x900
[ 2421.033937]  ? lock_release+0xa00/0xa00
[ 2421.033951]  ? perf_trace_sched_process_exec+0x860/0x860
[ 2421.033969]  ? dup_userfaultfd+0x6d8/0x890
[ 2421.048309]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2421.048333]  ? vma_compute_subtree_gap+0x160/0x240
[ 2421.048351]  ? validate_mm_rb+0xaa/0xc0
[ 2421.057856]  ? __vma_link_rb+0x26c/0x370
[ 2421.066039]  copy_process+0x45e9/0x87a0
[ 2421.076966]  ? __cleanup_sighand+0x70/0x70
[ 2421.076985]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2421.091181]  ? check_preemption_disabled+0x48/0x280
[ 2421.091195]  ? zap_class+0x640/0x640
[ 2421.091216]  ? perf_trace_lock+0x14d/0x7a0
[ 2421.091239]  ? lock_is_held_type+0x210/0x210
[ 2421.091254]  ? __lock_is_held+0xb5/0x140
[ 2421.091277]  ? zap_class+0x640/0x640
[ 2421.091294]  ? __lock_acquire+0x62f/0x4c20
[ 2421.104847]  ? __account_cfs_rq_runtime+0x790/0x790
[ 2421.104890]  ? find_held_lock+0x36/0x1c0
[ 2421.104946]  ? do_wp_page+0x127c/0x2920
[ 2421.104962]  ? lock_downgrade+0x900/0x900
[ 2421.104981]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2421.115529]  ? kasan_check_read+0x11/0x20
[ 2421.126057]  ? do_raw_spin_unlock+0xa7/0x330
[ 2421.126072]  ? do_raw_spin_trylock+0x270/0x270
[ 2421.126086]  ? pgd_free+0x380/0x380
[ 2421.126101]  ? lock_is_held_type+0x210/0x210
[ 2421.126127]  ? _raw_spin_unlock+0x2c/0x50
[ 2421.133890]  ? do_wp_page+0x528/0x2920
[ 2421.133916]  ? finish_mkwrite_fault+0x650/0x650
[ 2421.133933]  ? mark_held_locks+0x130/0x130
[ 2421.133952]  ? find_held_lock+0x36/0x1c0
[ 2421.143619]  ? __lock_acquire+0x62f/0x4c20
[ 2421.143635]  ? debug_smp_processor_id+0x1c/0x20
[ 2421.143648]  ? perf_trace_lock+0x14d/0x7a0
[ 2421.143663]  ? debug_smp_processor_id+0x1c/0x20
[ 2421.143677]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2421.143689]  ? trace_hardirqs_on+0xbd/0x310
[ 2421.143711]  ? mark_held_locks+0x130/0x130
[ 2421.155552]  ? zap_class+0x640/0x640
[ 2421.155565]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2421.155583]  ? finish_task_switch+0x1f4/0x910
[ 2421.155600]  ? finish_task_switch+0x1b4/0x910
[ 2421.163716]  ? __switch_to_asm+0x34/0x70
[ 2421.163737]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2421.163753]  ? check_preemption_disabled+0x48/0x280
[ 2421.163770]  ? __switch_to_asm+0x40/0x70
[ 2421.173595]  ? print_usage_bug+0xc0/0xc0
[ 2421.182917]  ? print_usage_bug+0xc0/0xc0
[ 2421.182942]  ? __lock_acquire+0x62f/0x4c20
[ 2421.182956]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2421.182989]  ? mark_held_locks+0x130/0x130
[ 2421.192646]  ? lock_acquire+0x1ed/0x520
[ 2421.192661]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2421.192682]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2421.192698]  ? check_preemption_disabled+0x48/0x280
[ 2421.192711]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2421.192727]  ? check_preemption_disabled+0x48/0x280
[ 2421.192744]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2421.202328]  ? debug_smp_processor_id+0x1c/0x20
[ 2421.202343]  ? perf_trace_lock+0x14d/0x7a0
[ 2421.202356]  ? debug_smp_processor_id+0x1c/0x20
[ 2421.202373]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2421.210476]  ? lock_is_held_type+0x210/0x210
[ 2421.210494]  ? perf_trace_lock+0x7a0/0x7a0
[ 2421.210511]  ? zap_class+0x640/0x640
[ 2421.210528]  ? zap_class+0x640/0x640
[ 2421.238397]  ? lock_is_held_type+0x210/0x210
[ 2421.238413]  ? perf_trace_lock+0x7a0/0x7a0
[ 2421.238445]  ? find_held_lock+0x36/0x1c0
[ 2421.266113]  _do_fork+0x1cb/0x11d0
[ 2421.266134]  ? fork_idle+0x1d0/0x1d0
[ 2421.266151]  ? __do_page_fault+0x620/0xe60
[ 2421.279909]  ? kasan_check_read+0x11/0x20
[ 2421.292858]  ? _copy_to_user+0xc8/0x110
[ 2421.292878]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2421.292895]  ? put_old_timespec32+0x110/0x280
[ 2421.292912]  ? get_old_timespec32+0x2a0/0x2a0
[ 2421.301367]  ? do_fast_syscall_32+0x150/0xfb2
[ 2421.301383]  ? do_fast_syscall_32+0x150/0xfb2
[ 2421.301399]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2421.301416]  ? trace_hardirqs_on+0xbd/0x310
[ 2421.301430]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2421.301444]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2421.301460]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2421.301474]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2421.301496]  __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2421.314479]  do_fast_syscall_32+0x34d/0xfb2
[ 2421.326640]  ? do_int80_syscall_32+0x890/0x890
[ 2421.326657]  ? entry_SYSENTER_compat+0x68/0x7f
[ 2421.326673]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2421.326690]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2421.335153]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2421.335171]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2421.335190]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2421.335211]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2421.352197]  entry_SYSENTER_compat+0x70/0x7f
[ 2421.352211] RIP: 0023:0xf7fb2a29
[ 2421.352226] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 2421.352239] RSP: 002b:000000000845fd70 EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[ 2421.360283] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000
[ 2421.360292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000895a968
[ 2421.360300] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2421.360308] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2421.360322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2421.364730] Task in /syz1 killed as a result of limit of /syz1
[ 2421.373654] memory: usage 307196kB, limit 307200kB, failcnt 498
[ 2421.386851] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2421.405205] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2421.418087] Memory cgroup stats for /syz1: cache:16KB rss:271192KB rss_huge:251904KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:271364KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 2421.432400] Memory cgroup out of memory: Kill process 27437 (syz-executor1) score 1106 or sacrifice child
[ 2421.446325] Killed process 27437 (syz-executor1) total-vm:70252kB, anon-rss:2208kB, file-rss:33464kB, shmem-rss:0kB
[ 2421.503066] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000
[ 2421.508549] syz-executor2 cpuset=syz2 mems_allowed=0
[ 2421.535515] CPU: 1 PID: 31328 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #255
[ 2421.829548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2421.838894] Call Trace:
[ 2421.841486]  dump_stack+0x244/0x39d
[ 2421.845125]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2421.850348]  dump_header+0x27b/0xf72
[ 2421.854073]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2421.859617]  ? check_preemption_disabled+0x48/0x280
[ 2421.864637]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2421.870185]  ? pagefault_out_of_memory+0x197/0x197
[ 2421.875147]  ? debug_smp_processor_id+0x1c/0x20
[ 2421.879829]  ? perf_trace_lock+0x14d/0x7a0
[ 2421.884071]  ? debug_smp_processor_id+0x1c/0x20
[ 2421.888743]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2421.893680]  ? lock_is_held_type+0x210/0x210
[ 2421.898095]  ? perf_trace_lock+0x7a0/0x7a0
[ 2421.902360]  ? debug_smp_processor_id+0x1c/0x20
[ 2421.907034]  ? perf_trace_lock+0x14d/0x7a0
[ 2421.911274]  ? zap_class+0x640/0x640
[ 2421.914992]  ? print_usage_bug+0xc0/0xc0
[ 2421.919068]  ? lock_is_held_type+0x210/0x210
[ 2421.923516]  ? perf_trace_lock+0x7a0/0x7a0
[ 2421.927788]  ? find_held_lock+0x36/0x1c0
[ 2421.931909]  ? mark_held_locks+0xc7/0x130
[ 2421.936062]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2421.941184]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2421.946292]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2421.950883]  ? trace_hardirqs_on+0xbd/0x310
[ 2421.955214]  ? kasan_check_read+0x11/0x20
[ 2421.959360]  ? ___ratelimit+0x3b4/0x672
[ 2421.963340]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2421.968444]  ? trace_hardirqs_on+0x310/0x310
[ 2421.972855]  ? lock_downgrade+0x900/0x900
[ 2421.977031]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2421.982142]  ? ___ratelimit+0x3b9/0x672
[ 2421.986131]  ? idr_get_free+0xf70/0xf70
[ 2421.990134]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2421.994630]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2421.999138]  oom_kill_process.cold.27+0x10/0x903
[ 2422.003936]  ? oom_evaluate_task+0x540/0x540
[ 2422.008364]  ? cgroup_procs_next+0x70/0x70
[ 2422.012598]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2422.017090]  ? oom_badness+0xaa0/0xaa0
[ 2422.020981]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2422.025735]  ? rcu_lockdep_current_cpu_online+0x1a4/0x210
[ 2422.031272]  ? mem_cgroup_iter_break+0x30/0x30
[ 2422.035880]  ? cgroup_file_notify+0x226/0x2f0
[ 2422.040376]  out_of_memory+0xa84/0x1430
[ 2422.044361]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2422.048952]  ? kasan_check_read+0x11/0x20
[ 2422.053100]  ? oom_killer_disable+0x3a0/0x3a0
[ 2422.057650]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2422.062520]  ? memory_oom_group_write+0x160/0x160
[ 2422.067365]  ? try_charge+0xa5f/0x1700
[ 2422.071285]  try_charge+0xda9/0x1700
[ 2422.075033]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2422.079698]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2422.084640]  ? kasan_check_read+0x11/0x20
[ 2422.088788]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2422.094071]  ? rcu_softirq_qs+0x20/0x20
[ 2422.098057]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2422.103592]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2422.108525]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2422.113284]  ? lock_page_memcg+0x350/0x350
[ 2422.117528]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2422.122306]  memcg_kmem_charge_memcg+0x7c/0x120
[ 2422.126991]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 2422.131501]  memcg_kmem_charge+0x149/0x350
[ 2422.135749]  __alloc_pages_nodemask+0x75e/0xea0
[ 2422.140437]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2422.145722]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[ 2422.150755]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2422.156297]  ? check_preemption_disabled+0x48/0x280
[ 2422.161349]  ? rcu_lockdep_current_cpu_online+0x1a4/0x210
[ 2422.166920]  ? rcu_pm_notify+0xc0/0xc0
[ 2422.170825]  ? copy_process+0x2026/0x87a0
[ 2422.174975]  ? rcu_read_lock_sched_held+0x14f/0x180
[ 2422.179995]  ? kmem_cache_alloc_node+0x349/0x730
[ 2422.184777]  copy_process+0xa09/0x87a0
[ 2422.188707]  ? find_held_lock+0x36/0x1c0
[ 2422.192782]  ? finish_task_switch+0x1f4/0x910
[ 2422.197292]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2422.201796]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2422.206332]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2422.210926]  ? __cleanup_sighand+0x70/0x70
[ 2422.215179]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2422.220739]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2422.225247]  ? finish_task_switch+0x1f4/0x910
[ 2422.229756]  ? finish_task_switch+0x1b4/0x910
[ 2422.234254]  ? __switch_to_asm+0x34/0x70
[ 2422.238330]  ? preempt_notifier_register+0x200/0x200
[ 2422.243434]  ? __switch_to_asm+0x34/0x70
[ 2422.247491]  ? __switch_to_asm+0x34/0x70
[ 2422.251553]  ? __switch_to_asm+0x40/0x70
[ 2422.255623]  ? __switch_to_asm+0x34/0x70
[ 2422.259699]  ? __switch_to_asm+0x40/0x70
[ 2422.263787]  ? __switch_to_asm+0x34/0x70
[ 2422.267882]  ? __switch_to_asm+0x40/0x70
[ 2422.271958]  ? __switch_to_asm+0x34/0x70
[ 2422.276023]  ? __switch_to_asm+0x34/0x70
[ 2422.280100]  ? __switch_to_asm+0x40/0x70
[ 2422.284161]  ? __switch_to_asm+0x34/0x70
[ 2422.288223]  ? __switch_to_asm+0x40/0x70
[ 2422.292280]  ? __switch_to_asm+0x34/0x70
[ 2422.296344]  ? __switch_to_asm+0x40/0x70
[ 2422.300439]  ? __schedule+0x8d7/0x21d0
[ 2422.304360]  ? __sched_text_start+0x8/0x8
[ 2422.308514]  ? zap_class+0x640/0x640
[ 2422.312424]  ? plist_check_list+0xa0/0xa0
[ 2422.316595]  ? mark_held_locks+0xc7/0x130
[ 2422.320789]  ? perf_trace_sched_process_exec+0x860/0x860
[ 2422.326264]  ? do_raw_spin_unlock+0xa7/0x330
[ 2422.330675]  ? do_raw_spin_trylock+0x270/0x270
[ 2422.335272]  ? __might_sleep+0x95/0x190
[ 2422.339253]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2422.344833]  ? futex_wait_queue_me+0x55d/0x840
[ 2422.349421]  ? refill_pi_state_cache.part.8+0x310/0x310
[ 2422.354801]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2422.360364]  ? get_futex_value_locked+0xcb/0xf0
[ 2422.365067]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 2422.370118]  ? futex_wait_setup+0x266/0x3e0
[ 2422.374444]  ? futex_wake+0x760/0x760
[ 2422.378245]  ? __sanitizer_cov_trace_switch+0x53/0x90
[ 2422.383448]  ? drop_futex_key_refs.isra.14+0x6d/0xe0
[ 2422.388560]  ? futex_wait+0x5ec/0xa50
[ 2422.392397]  ? print_usage_bug+0xc0/0xc0
[ 2422.396471]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2422.401048]  ? retint_kernel+0x2d/0x2d
[ 2422.404953]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2422.409899]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2422.414653]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2422.420115]  ? futex_wake+0x304/0x760
[ 2422.423940]  ? __lock_acquire+0x62f/0x4c20
[ 2422.428182]  ? retint_kernel+0x2d/0x2d
[ 2422.432077]  ? print_usage_bug+0xc0/0xc0
[ 2422.436138]  ? mark_held_locks+0x130/0x130
[ 2422.440380]  ? do_futex+0x31a/0x26d0
[ 2422.444554]  ? do_futex+0x249/0x26d0
[ 2422.448284]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2422.453215]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2422.458753]  ? check_preemption_disabled+0x48/0x280
[ 2422.463771]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2422.469343]  ? check_preemption_disabled+0x48/0x280
[ 2422.474384]  ? debug_smp_processor_id+0x1c/0x20
[ 2422.479081]  ? perf_trace_lock+0x14d/0x7a0
[ 2422.483383]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2422.488166]  ? lock_is_held_type+0x210/0x210
[ 2422.492623]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2422.497559]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2422.502341]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2422.507801]  ? zap_class+0x640/0x640
[ 2422.511538]  ? zap_class+0x640/0x640
[ 2422.515270]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2422.520044]  ? find_held_lock+0x36/0x1c0
[ 2422.524136]  _do_fork+0x1cb/0x11d0
[ 2422.527690]  ? fork_idle+0x1d0/0x1d0
[ 2422.531434]  ? kasan_check_read+0x11/0x20
[ 2422.535587]  ? _copy_to_user+0xc8/0x110
[ 2422.539589]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2422.545147]  ? put_old_timespec32+0x110/0x280
[ 2422.549657]  ? get_old_timespec32+0x2a0/0x2a0
[ 2422.554162]  ? do_fast_syscall_32+0x150/0xfb2
[ 2422.558662]  ? do_fast_syscall_32+0x150/0xfb2
[ 2422.563166]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2422.567756]  ? trace_hardirqs_on+0xbd/0x310
[ 2422.572083]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2422.577626]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2422.582218]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2422.587343]  __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2422.592375]  do_fast_syscall_32+0x34d/0xfb2
[ 2422.596714]  ? do_int80_syscall_32+0x890/0x890
[ 2422.601305]  ? entry_SYSENTER_compat+0x68/0x7f
[ 2422.605902]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2422.610929]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2422.615781]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2422.620639]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2422.625669]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 2422.630694]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2422.635729]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2422.640592]  entry_SYSENTER_compat+0x70/0x7f
[ 2422.645003] RIP: 0023:0xf7f49a29
[ 2422.648384] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 2422.667297] RSP: 002b:00000000f5f450cc EFLAGS: 00000296 ORIG_RAX: 0000000000000078
[ 2422.675016] RAX: ffffffffffffffda RBX: 0000000002001ff9 RCX: 0000000000000000
[ 2422.682291] RDX: 0000000099999999 RSI: 0000000020000180 RDI: 00000000ffffffff
[ 2422.689565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2422.696841] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2422.704116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2422.738948] Task in /syz2 killed as a result of limit of /syz2
[ 2422.756769] memory: usage 307036kB, limit 307200kB, failcnt 125
[ 2422.763670] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2422.770525] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2422.787331] Memory cgroup stats for /syz2: cache:16496KB rss:262236KB rss_huge:247808KB shmem:16404KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:16396KB active_anon:262348KB inactive_file:4KB active_file:0KB unevictable:0KB
[ 2422.817593] Memory cgroup out of memory: Kill process 27345 (syz-executor2) score 1106 or sacrifice child
[ 2422.827942] Killed process 27345 (syz-executor2) total-vm:70252kB, anon-rss:2216kB, file-rss:33508kB, shmem-rss:0kB
16:58:23 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0x0, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:23 executing program 3:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x21, 0x4, 0x17, 0xc, 0xa, 0x81, 0x6, 0xa4, 0x1}})
r1 = memfd_create(&(0x7f0000d0bffe)="7b10", 0x3)
fcntl$addseals(r1, 0x409, 0x7)
io_setup(0x7f, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="e5", 0x1}])

16:58:23 executing program 5:
r0 = socket(0x200000000000011, 0x3, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x208000, 0x0)
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040))
bind$packet(r0, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14)
syz_emit_ethernet(0x16, &(0x7f0000000240)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '^', "69ba95"}}}}}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

16:58:23 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000000040030000000000"], 0x14}}, 0x0)

16:58:23 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2422.840767] oom_reaper: reaped process 27345 (syz-executor2), now anon-rss:0kB, file-rss:32832kB, shmem-rss:0kB
16:58:23 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:23 executing program 0:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x20403)
getpeername(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x4a4, 0x0, 0x0, 0x280, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000180), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast1, 0x8, 0x1}}}, {{@arp={@broadcast, @loopback, 0x0, 0xff0000ff, @empty, {[0xff, 0xff]}, @mac=@random="ebdf24fca057", {[0xff, 0xff, 0xff, 0xff, 0xff]}, 0xc9bd, 0x3, 0x6, 0x4daf, 0x7efb8fcc, 0x9, 'ip6gretap0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0x28}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @empty, 0xf}}}, {{@arp={@multicast1, @multicast1, 0xff, 0xff000000, @empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80000000, 0x100, 0x6, 0xffffffff80000001, 0xc1, 0x80, 'rose0\x00', 'lo\x00', {}, {0xff}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@remote, @local, @local, 0xf, 0x1}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x4f0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x40000007})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0xe})

16:58:23 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(0x0, 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:23 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, r1/1000+30000}, 0x8)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x3f000000, 0x0, 0x0)

16:58:23 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
alarm(0x3cd3)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0x68, 0x4, 0x1f8, "e19c6bdcb31119862b6079058812cc1d", "8c5ad4ff94efdccb5d998134946336df4f199f1c2056fe66cae420ab3a02eb1d612af16434cf33b5cb487378da8f4985e242b95d86819be763a043f55d55fcb980ac0132280f49094d971fb9fc8b4c711075db"}, 0x68, 0x2)
vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e170acaf60d23eb7cac399fac9af6014b793bb46681c45e8ad07fb4b772c8c81ca464a9d83a5ae9bc0189dbcd27f06a0154e39875b1745995a5e6a57c692f860c24d04cdf04ce97847273572fcd3ebb6a198ce3eba78cb50a4db819ba1d648d5b2dc524bd8f18f78c8c3dba21d8b6a33f6e97a5688583973579df533061737ad762de997dcac05954c2eead058d19cb63cd75f9c6b674553e7bd0d2104da4f358cd676c73e0bad5d19680edbe96c7af75c5d4353f6761f5692f3bce85bccc7b5", 0xc0}, {&(0x7f0000000000)="fafa7f4f46ae8112d4bf450c2c28fd7f36d3dd041d13c887a9648d96ec02b7e11c89bc6dd9304f6f3f82c87603ed50518f24e5d55acefbd1396ca09dabac571307d6a6fbe589cb38fed1b68809e79511011ce0b22cb553bf6281045ceeaad8acf712235615", 0x65}, {&(0x7f0000000180)="76f8f77f95e73845142575b4", 0xc}], 0x3, 0xc)
ustat(0x5, &(0x7f0000000300))
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080), 0x4)
r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000340)=0x4)
ioctl$sock_bt(r1, 0x8907, &(0x7f0000000240)="1c1d35d055e202ae396d7d00a7f07632d4b66f195ab2ee9d579ee0f3b74e9abb7b55a31c3277e24c41d2638c56c12acbfc200328164420d1a7e3320f512fc833c388ea00d9d60d79ab681764bc0db797a98a2d34eb02fa90526570af190dedd469e444c7eec8d0889bfd6a934f2cbd8d2861d3dc67ab639f7b8d962f965f9c1c58ce2adf27a708147c0d5dc9bf4155a965e71aa7c4208d28f79c2086f84e55ab592d2516d744617e0f9ceb42c839fe69fa73742386369aff0b5e")

16:58:23 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x0, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:23 executing program 0:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00"\x00', 0x6})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096})
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utime(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500))
r1 = syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x0, 0x10000)
socket$inet(0x2, 0x1, 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000600)={0x1, 0xffffffffffffff00, 0x1, 0x0, 0x2}, 0xe)
r2 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x401, 0x0)
getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000280)=0xb)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x1100000000000000, 0x1100, 0xaa, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b97", 0x4f}], 0x1}, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x8000000b, 0x9, 0x1, 0xffffffff, 0x80, 0x17, 0x240}, {0xc000000d, 0xc92d, 0x2, 0x7ff, 0x6, 0x100, 0x8d1f}]})
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet_dccp_int(r2, 0x21, 0xb, &(0x7f0000000000)=0x400, 0x4)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x1f, 0x8}, 0x10)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000540)={0x0, 0x4}, 0x8)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000002c0)={0x200000000001})
close(0xffffffffffffffff)

16:58:23 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x0, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:23 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000034000)={0x0, 0x0, 0xf7fffffffffffffe}, 0x4)

16:58:23 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2)
ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000340)=""/38)

16:58:23 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:23 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff0000000000f0ffff00000000"], 0x14}}, 0x0)

16:58:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUMSTD(r1, 0xc0405619, &(0x7f0000000080)={0x5, 0x800000, "b6b1f3c9a2f5999135807da4c91e0d97bc29f9c27ee50505", {0xdcd53f0c0000000, 0x1000}, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x10000004a, 0x0, r0, 0x0, [0x14]}, 0x21)

16:58:23 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:23 executing program 5:
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffff})
r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1f, 0x400000)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000280), 0x4)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000500)="6272696467653000480100")
r3 = accept4(r0, 0x0, &(0x7f0000000240), 0x800)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000340)=0x30)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x40000, 0x0)
ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f00000004c0)={0x0, 0x4, &(0x7f00000003c0)=[0x6, 0x0, 0x6, 0x2], &(0x7f0000000400)=[0x0], 0x0, 0x1, 0x0, &(0x7f0000000440)=[0x0], 0x0})
r5 = socket(0xa, 0x3, 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000180)={"6272696467653000480100"})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000540)={<r6=>0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0xb}, 0x200}}, 0x7f, 0x1f}, &(0x7f0000000100)=0x88)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x7f, 0xffffffffffffffff, 0x20c, 0x1ff, 0x1, 0x3, 0x8, 0x200, r6}, &(0x7f0000000200)=0x20)
ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f0000000380)={0x6, 0x8000000})
getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000480)=0x60)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000140)=0x5)

16:58:23 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x3c2cf5d11cff0598, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet(0x2, 0x4, 0x80000000)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080)={0x50f6}, 0x4)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x2710, 0x0, &(0x7f0000015000/0x3000)=nil})
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x10000, 0x0)
mq_timedsend(r3, &(0x7f0000000100)="1ee661f1fa236a10066ea699befa633cefa3618c25888ef44f867fb5649676b1a627567a08ef34d07b03b74367c13ddc5284fc16010f70a8dd1ec2333e878a5254515ed0ba882c0d415b4903a62ffaf92dccf75d4a7a07e47f16119315bf2fffd8e3b8c64633c89ed45bad1afc84d8809fdbe7af94fcb4ec500f18d6b57d56142abe8276cb98c7a973be20287f8e3585fe0bf53a488ef2712527d41b69158f856d16abc177928722a7967f66e98aeb709b2e874ce9c28c3c26b3ba01b45d3d4e1b8c23c9fd7c80a758b6874b3edf27045e6294f773f5eaba4a437f78fbce7a074f6ebb48551de4745d9ab556b3f630b27ae19a836202aab0e08bcbc9a34a7dd3a3901fe51f3eb769f61cfb847b4bf55d1047defd12801cb866b2c7d4bed4d1a89d6db2fd776751c7f3b981f229871cac4ca532b5faf5f8add1751ec7c0812b0af5ceedc715a403cf7161bed55cf91ec84fb8b5963813ad7d2a1eac6a3693af5ed7f17a7bfdee78ff3f4fa54d3acb941de9b14efc4ebf9bc47f71c789ce0d9e5fac0054ed38a7c9d192a39c73abb41145f1f61b1bf8ff2c2ae0520d3ac89cae8b8364d6da5bf4c9f45d4288fe0ccd4a5eb822e1f435f06d166b2d79c22047116c0c82922790df20e139df336602e6854c9725dabae9b7790cf3cac6fd2610ef94a1fac92f3297805613100978d5095944713e83c179b59aaef7a380172bdf718d91e3984cbe6f602aa75854282c1b588f4b047637a9b9dfd547b72da6c07db0c69fa24a24cebfdd8acdfa69ce60fe53b7c8e9593c91c0075d55e7999abb309e5ecb427105c94a396720ccef891dec1ca7adcd9062bf3d4576650ec16306997b3caeb0a9afbaa224b4ebd0b86b6499cf9e02387d9f038be2c886be040ae3b07d3a44402c57eb828f16c737b42f4b0beaf1e3a91656fca850a7f055d6dbfb3606659750c7d6a3250d6e862955b469c295db587ac1205463d8480b6fd59ebd3ccd224270e82828fe8f417218487547f9c8b048f332262444cb70f152b5e8e359fbb00a199ca552b160ecca14f2468b5c96eda0973512be2508a67ee82c738e648ec75b1dfffb5300d74145770a69a2164f0cbc1830820f4bab86de615a08866a69731b6fce74b42a61378ccf026b85e7810e29339abe1ab97a27cd4d72659dda05a2268432ae59753464f70a3e4d91ece2194065c6d30773fa19f3ec9592d39abfc037ccb2afa076a63c9361933daefbf68c848caebc2fd65a8a67b3a5763f35416d0cb436f5075453d58107b02d91ff5dc9e076f6264de430618ce5ff75b07616dfbfd0702cfaff78c208af2a33d419fe561d4ce6ffe951a2388d33938b4719216dcdd3f6bf0ecd621798b1bc10695259b7d4916c37e7c3c20fb239a11683e55874b19ce16aceed165e148ec5609df59eeda6263594a57fdc403fd84ebae33ae7195276729106871966e907e73941d9c347ea3d1135ebc017426ebe392bb1b3825b8e4e40c0612f2de46512c75cee0bb60098f529b82b2d36550152cc287c747c2309f363cd559b0f8e38d7c6476ff71f77e0a946ab63f3242b087722692c037a74fcd9b28543679ea1724715c2ae2c2a0bc4ae045c697f4ceef3c00753bb5fc1962fceb17c7c0d602884d182057593ed0a5665f1c8b50eb2a8bd1aa26c5d305d280c527cbf70864c512d7b6f1c61cd1dc4ac50322f6a4076ded0ca1331cc5056ac06c7fba0a10d068e09459ef72517b824a64a73f94bf195e9d59cbb9fc1e68d9df700e858ba77da89466769ec226dd73c1dc8f2de131e9407b3ea69c097a45a363d6dfcd8bab2ee626a958cb87d781640941496c6f4ded025d6bfa5a5750efc05b8d36539337b02895ab63480247964cb4fc17565042da01e361bfbabb6eabcc11a349b7c698b1a0169f499578512621cbb3f0521f25e418d76644a54abfdbf7a95e0a49aac3b3569a213e1c5807c0f368c2c5bc1d0eeee7d03cc4f9b2d179f467a9222b886cab7d8bdf62b8d3b3c6deac9c98ccc35f6342e75f63620e07b35138f88134a3dea73a9b3fc67345940499e8dd32683336aa03f3dc30e43b7218d55915fffd2a6117c093f6407c22cc3dcda39b4832b76fc976d42aebcdd2d6784c4d9dd407a4e9fc616f186ca4d9f1eb06d14ee26353cead9666f45dc1963394c960c8ef5edde8ce09cb6de1e3dda95fa7882236de62a5cea7c95fd21d4d19fe6e3138ad3a49457f568d692cf0ef7cec5d096240a4dfdf58ab5c3fccdb7657ded1567312c43521a8bb4acfc7c98a055d763e84fc940fc45cc59d9b8af7c926c2cb4932dd00ba80bc52a955d9d8b2e6e44a9b7a715905bc37da328db3e927802d79e84cdedbdf1fdd3538fca293ea7e318373ca44a4de5bd1fb82b891ea802b76077dd2c97e16845846c063b3ea517fff316bcd534773d62167c21d6659437d3b446773f5869ebd10c13865386bc6fe12d520395bb6952f3ff70ca47b7c221ee590ca8eb31ff38d7241c3fc4b431701a71db2acaa5f6890048843193f2287efd46bdbf90ad97bc893c07e2df613ee780fdf9e73fbe5f2e546ab167c90fea8e3142003f7dc40ef330ebf4c133f546eb89c38d2e86841f952940ca05923290f5846cbdd17f7dc4c5d77fd01c2ce9ef243db90bdd5a0f3f62e7223f9f16bd133cfb8b14d0e52783f3eba736ef66712df5a8adc0c929f4c5e978319be93a02139a2a74fd7c1ce1480b5d4dd85a5c5c630bdccd275ffa32f1eb921b096e8a76df2963a5326cd721b4d800be89adc4e1a3ba64d41bb7e34e893faad3fbd15090e9a3d67a88f7616fe0b272ccb890029be510460a4173d3012857da4e0fdfd6eeb3d40e27a7e5264d423309cbbd66f6d4f2ff8fd922d635b867f66d069a1275e594ada62e01633e14e2e0fcaafb8099c84b68c79bd490e514e0015dc87acbf022186075d68e59e6126471ab5eaa156e8c3cad6b0b7cb5c3a93a0b8b9e2ea27e1122ae704e9c6a6f00d3be5c403250cfdfd2aea5f181abf7b5baaf9e3eee16f9464c2871d3c699d248edcc4383d81ebd5398a837730d383ecb51e0de673c34103a42ccdb8cc04b9cce881cdfe0072eb949fae15ffb0b21866ade3d951210d42813c2e1f9f235588b3d850c7746c806ea23173400c68d8135171df9a55998425c417410e719674887eef69504d568586edcbe58e88031300cf1caa33016f494ce9514e8e8e58e0f6091f3252b2ededa08149697ec46634c3073330053c2f746859ed6aa5f06b74f6d1620ac7bda0cd5511bfc93a0bdebd698b55145f679cbd2e62dff1f1d0e1214e84f00b20e704ecd51ad91fa8dc7d92314506457711b29f2cd31ad2a0677b467e7c3e1122fa8ddf356af823d1f4b78660f658ad306e172c543f85dcff562b111598e7243eba521cd78372ecc266abb055732774236f5eaa22ea8e2c9ea37b38bfc4cbf82ccd22870295726cc8f68ba47cfbb64b15daae59961493e7e4e1dcc8a9f4b2fb6bc662f3dbd1838ff9a05d09068cba06c2eb6e6dec4fe6012bf159772a8b90a08a0db48feb38a361cbea8e2903c4cd86ec6a0bea35b8176e9cce5fc4e1155fd28f1087151f032a1f1b610448941527c8541359c6950e83df93d1eb23b6de44c33bedd6fbc2829583b7e7bbd9a9ef656ca8076ab5c663abfd30d29b44c467868c411af09ce6ecb3e46295e81e61610a6da011e5025bc0581a02235acff7157836e232e821fc7c0303c03294de9204eba4f18cabb53d8eb5d296c21afb67af246877e02620b8e8f60256acaf297263a90cf0b657012f09198a3a3b4c4a117bca322a1e10b592e6a564dd466ed763437574a21fa74a6814b05971b2cd32948a27ac1f28ffbb57933f8e370cfc9c44059fbcdf5ab7d29840a41a9d3609ea2d95697e4f007d5a3325ca69785cc4dd53efa99e970dd0f5939f65612a97ff37f5fc569b84fcece78ec5563d6e5d70783b8f093933b02dd9964b2139be3ec69d0c6c65ff3cb093b878c681c3ec0ca9fe8528bddf18d5620ccfd9c3a4054e6c34589948c5b9fe8ce1a382593a7543f59c13e111c98da0644d86482b4262bb86de2770935d108dff85939529c6ee68681dc73a457d7301a7507bd9e6a9042ba79ba0040fb3529249f0c6fd57efde657f8476ccc373d004ad448398dae7d337ddfdae627ec9f405a33c2bf818b256b7cd8d8f27c14153ecbd3d88bdb945cc489ced43a154987f3feedcb56038925e29392e28fd27680a264553eadd602ee4622e12253b29de7731679f560b3d767148e66f6d55099ced9dbaa034c152591cf38574a22fd7d65bb984d39b160c3e67b63c6c33ac377c66235672fc22ad3b1f3b262a6cfe8a74ff96b409bb19db1aea0b37dd19b67338daab1e8ff86ed7adc53583d48a15d937ecdd655d35633b9f8e837770092610352fb5e8b2a9bae0e5f8d508e6b163b3a0da14b57350b05736a367041af34f38e7706a5484941774cda8d99c1eec1bfd816b5a0d69e3116d9e90b005517b1570b7babd48006462ea88c269ba43ebfd49048ed0a19431477d4d8dcb564f5eb8d02edbd907fefc74122ae5a177c493075ea3743c0ea9a98bc1898861173ee23f4656151ae52c5b6b32cf546924a0dd4d559f582046fe3ce0efc6db938b9075de482a84de4286986f9567a1cd8307db379733bafe434d96da262faf7bcaf8c817a489e60303fcf84b7f7de124e8d0f65b58469565eeae063ba0e4481bc77a200cab69cfb7694c4a5f247840f3f565628334b239580551b5b2c84ffa9a12e7b433b46045bdd2f8ecaad466277dbb6d6c6fc1a5220cad7787fff85f43794d4465ba9ce750f7ee5bce81ea057579f40087693e75a81422dd5b15eb60da42d8214799eb1656dd56cd43a6b562ecfcf46deac3db2ab647aeeb92bdad5fccc805ce350dc6d6b4e31e27dc5c89e00914a98dbfe215f0acdb5e9b94264b00934dbf4f0ee884d1b52b8c8a838034c5b5200cb732f1e298e85f1bac19a35b1134d3edab6da0b135a3f574da9717d8b30eb9813a02f4a83c20380a7e8eb121ec2f7f4b122fac78eb10683bdc0b502ff2683c691e9a2ca023b9d4dfb96d20edcda72a5301de2dc3527cdab9d97b765a9546662dfcb549db229b3756cf5777c595c1375362ca7c10125fe4083a23081bd543801eb5079c1a1029ca916e1ef8d93c1c63e9ef1993dc37d8788f999a353b178a6993ba32f02f9c8e04f1a96599acd410bd471dc6fa921920c6942b3c22b3a0965e27624720d1d7e3bc3a9c307f4643f6546d0d940af8fae0aefa48a683a3a624d5aeb731f8ae90eb7a667ed833933d470d2f9ccce8d9866b016ff2b318e3e3da3f6cab6afc69f03bb2857f9be12ec585ca7177dcb3a99d46206f801ef43c2d7aef17d998b6a540064599a6120455568e54f8dff2d31384152826f6e2a0dc179d9743ee298e4fed172f01e557ccd9a8638f6b4b4dd072c53e9f013b249ff03236cbcb304f33cd1b82c3d8f6ba5b3d3628d206a3dafd646ff0edcdff3eecef7763443f3e9a51afcb1093319f144937bb510e78d6ccac1600132dc789b98e66ca60f544e04a61ea619db71695d54b29732351d3c3b6ee59ff53f7414bf89a01fdc80622b990fbbccb71262859ee0472be3ab935eb960b911785c6b5273704d57db1a1b1c96d55a01b078e1682389ed2e71f721a1471cee00f88c9c624f0c24908a74b1db6f60b6e719a8deebb089e79ce36a250a4355612c0cd827fd92641540bb27a285c3ba7de6fd4e51bf23dbc5408e570bd4ce76f8d6a33247d6602abe46e6b27d2a", 0x1000, 0x80000000, 0x0)

16:58:23 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r3 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:23 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x0, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:23 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000000480), 0x1000)
read$FUSE(r0, &(0x7f00000040c0), 0x1000)
write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10)

16:58:23 executing program 3:
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x4, 0x80000000, 0x5, 0x6})
r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d04635456517b50f805ae208258dbb7d0abe8d20cd000000885c8ba93c00", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bf4af44acfe05900000053c40600", "ee7a31319909e4000000000506eb00"})
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff)

[ 2423.732144] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0
[ 2423.737562] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2423.750328] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2423.784375] device bridge0 left promiscuous mode
[ 2423.802656] syz-executor2 cpuset=syz2 mems_allowed=0
[ 2423.817611] CPU: 0 PID: 24537 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #255
[ 2423.824978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
16:58:24 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x1, 0x2)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001380)='fou\x00')
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000001440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x40, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x88}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_IPPROTO={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="340000006600070700000000000000000000000042e0e0fef86506fb6aabdb07453e9aca0f89a0edcbbf75ebccef24efd8c7866a62a9", @ANYRES32=0x0, @ANYBLOB="1100000000000000140012000d0024339849fd7fb5c4ca052e724ba975c0de4c407130e1db45740d090069bbe9da659b5fe58d0f526aab698c3ce3fc3251b78ed35a11e0caf79504b61f9e9b64e496e4d77b01bbae22734c4101030f1d1ab90cb6d398d7"], 0x34}}, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffffffff27)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001240)='/dev/null\x00', 0x40080, 0x0)
connect$inet6(r3, &(0x7f0000001280)={0xa, 0x4e23, 0x8, @local, 0xc00000000000}, 0x1c)
ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f00000013c0)={{0x2, 0x4e23, @multicast1}, {0x307, @dev={[], 0x17}}, 0x0, {0x2, 0x4e21}, 'vlan0\x00'})
getsockopt(r0, 0x80000000, 0xfffffffffffffffe, &(0x7f0000000240)=""/4096, &(0x7f0000000140)=0xfffffe37)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200000, 0x0)

[ 2423.834330] Call Trace:
[ 2423.834352]  dump_stack+0x244/0x39d
[ 2423.834372]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2423.834390]  ? mark_held_locks+0x130/0x130
[ 2423.834407]  ? mark_held_locks+0x130/0x130
[ 2423.834424]  dump_header+0x27b/0xf72
[ 2423.854458]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2423.854476]  ? check_preemption_disabled+0x48/0x280
[ 2423.854494]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2423.863723]  ? pagefault_out_of_memory+0x197/0x197
[ 2423.863738]  ? debug_smp_processor_id+0x1c/0x20
[ 2423.863753]  ? perf_trace_lock+0x14d/0x7a0
[ 2423.863767]  ? debug_smp_processor_id+0x1c/0x20
[ 2423.863782]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2423.863801]  ? lock_is_held_type+0x210/0x210
[ 2423.902176]  ? perf_trace_lock+0x7a0/0x7a0
[ 2423.906420]  ? debug_smp_processor_id+0x1c/0x20
[ 2423.911098]  ? perf_trace_lock+0x14d/0x7a0
[ 2423.915355]  ? zap_class+0x640/0x640
[ 2423.919079]  ? print_usage_bug+0xc0/0xc0
[ 2423.923167]  ? lock_is_held_type+0x210/0x210
16:58:24 executing program 5:
syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x80)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r0=>0x0}, &(0x7f0000000400)=0x14)
r1 = syz_open_dev$amidi(&(0x7f0000000440)='/dev/amidi#\x00', 0x3b, 0x200)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xdcb}, [@map={0x18, 0x0, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, [], r0}, 0x48)

[ 2423.923195] netlink: 16 bytes leftover after parsing attributes in process `syz-executor3'.
[ 2423.927604]  ? find_held_lock+0x36/0x1c0
[ 2423.927630]  ? mark_held_locks+0xc7/0x130
[ 2423.927648]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2423.949414]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2423.954528]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2423.959136]  ? trace_hardirqs_on+0xbd/0x310
[ 2423.962639] netlink: 16 bytes leftover after parsing attributes in process `syz-executor3'.
[ 2423.963476]  ? kasan_check_read+0x11/0x20
[ 2423.963492]  ? ___ratelimit+0x3b4/0x672
[ 2423.963508]  ? trace_hardirqs_off_caller+0x310/0x310
16:58:24 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x369d, &(0x7f0000000080)=<r1=>0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
mmap(&(0x7f0000b31000/0x4000)=nil, 0x4000, 0x2000000, 0x44010, r2, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0xa00, 0x0)
io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f00000000c0), 0x0, 0x2, 0x0, 0x0, r3}, &(0x7f0000000200))
syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x5b, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f00000002c0)=0xffffffffffffffbc)
socket$pppoe(0x18, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f000044f000), 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), 0x4)
syz_emit_ethernet(0x190, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa018014da4f442a43c200000086dd60d8652b00742f00fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0)

[ 2423.963530]  ? trace_hardirqs_on+0x310/0x310
[ 2423.989660]  ? lock_downgrade+0x900/0x900
[ 2423.993834]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2423.998949]  ? ___ratelimit+0x3b9/0x672
[ 2424.002934]  ? idr_get_free+0xf70/0xf70
[ 2424.006914]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2424.011411]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2424.015940]  oom_kill_process.cold.27+0x10/0x903
[ 2424.020719]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2424.025222]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2424.029838]  ? oom_evaluate_task+0x540/0x540
[ 2424.034257]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2424.039804]  ? cgroup_procs_next+0x70/0x70
[ 2424.044071]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2424.048630]  ? oom_badness+0xaa0/0xaa0
[ 2424.052524]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2424.057326]  ? mem_cgroup_iter_break+0x30/0x30
[ 2424.061938]  ? mark_held_locks+0xc7/0x130
[ 2424.066103]  out_of_memory+0xa84/0x1430
[ 2424.070085]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2424.074682]  ? kasan_check_read+0x11/0x20
[ 2424.078855]  ? oom_killer_disable+0x3a0/0x3a0
[ 2424.083372]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2424.088223]  ? memory_oom_group_write+0x160/0x160
[ 2424.093062]  ? mem_cgroup_try_charge+0x627/0xe20
[ 2424.097836]  ? page_counter_try_charge+0x1c1/0x220
[ 2424.102773]  try_charge+0xda9/0x1700
[ 2424.106493]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2424.111428]  ? kasan_check_read+0x11/0x20
[ 2424.115595]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2424.120316]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2424.125911]  ? lock_page_memcg+0x350/0x350
[ 2424.130181]  ? lock_acquire+0x1ed/0x520
[ 2424.134165]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2424.139527]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2424.145064]  ? check_preemption_disabled+0x48/0x280
[ 2424.150091]  ? kasan_check_read+0x11/0x20
[ 2424.154238]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2424.159530]  ? rcu_softirq_qs+0x20/0x20
[ 2424.163559]  mem_cgroup_try_charge+0x627/0xe20
[ 2424.168187]  ? mem_cgroup_protected+0xa60/0xa60
[ 2424.172862]  ? print_usage_bug+0xc0/0xc0
[ 2424.176947]  ? __mod_zone_page_state+0x8a/0xf0
[ 2424.181540]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2424.187080]  ? isolate_lru_pages.isra.58+0xc7d/0x19e0
[ 2424.192336]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2424.197883]  mem_cgroup_try_charge_delay+0x1d/0xa0
[ 2424.202853]  wp_page_copy+0x51d/0x24f0
[ 2424.206749]  ? print_usage_bug+0xc0/0xc0
[ 2424.210831]  ? follow_pfn+0x2e0/0x2e0
[ 2424.214733]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2424.220274]  ? reuse_swap_page+0x4bd/0x1520
[ 2424.224598]  ? swp_swapcount+0x530/0x530
[ 2424.228661]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2424.234212]  ? check_preemption_disabled+0x48/0x280
[ 2424.239228]  ? __lock_acquire+0x62f/0x4c20
[ 2424.243477]  ? debug_smp_processor_id+0x1c/0x20
[ 2424.248147]  ? perf_trace_lock+0x14d/0x7a0
[ 2424.252392]  ? lock_is_held_type+0x210/0x210
[ 2424.256802]  ? debug_smp_processor_id+0x1c/0x20
[ 2424.261489]  ? print_usage_bug+0xc0/0xc0
[ 2424.265547]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2424.270475]  ? zap_class+0x640/0x640
[ 2424.274187]  ? check_preemption_disabled+0x48/0x280
[ 2424.279210]  ? debug_smp_processor_id+0x1c/0x20
[ 2424.283896]  ? find_held_lock+0x36/0x1c0
[ 2424.287972]  ? do_wp_page+0x518/0x2920
[ 2424.291860]  ? lock_downgrade+0x900/0x900
[ 2424.296011]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2424.300334]  ? kasan_check_read+0x11/0x20
[ 2424.304500]  ? do_raw_spin_unlock+0xa7/0x330
[ 2424.308907]  ? do_raw_spin_trylock+0x270/0x270
[ 2424.313967]  ? __pte_alloc_kernel+0x220/0x220
[ 2424.318462]  ? check_preemption_disabled+0x48/0x280
[ 2424.323518]  do_wp_page+0x520/0x2920
[ 2424.327260]  ? finish_mkwrite_fault+0x650/0x650
[ 2424.331960]  ? print_usage_bug+0xc0/0xc0
[ 2424.336029]  ? __lock_acquire+0x62f/0x4c20
[ 2424.340286]  ? __lock_acquire+0x62f/0x4c20
[ 2424.344552]  ? mark_held_locks+0x130/0x130
[ 2424.348824]  ? debug_smp_processor_id+0x1c/0x20
[ 2424.353508]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2424.359053]  ? check_preemption_disabled+0x48/0x280
[ 2424.364083]  ? debug_smp_processor_id+0x1c/0x20
[ 2424.368755]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2424.373689]  ? check_preemption_disabled+0x48/0x280
[ 2424.378710]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2424.384266]  ? print_usage_bug+0xc0/0xc0
[ 2424.388337]  ? print_usage_bug+0xc0/0xc0
[ 2424.392402]  ? debug_smp_processor_id+0x1c/0x20
[ 2424.397074]  ? perf_trace_lock+0x14d/0x7a0
[ 2424.401312]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2424.406250]  ? print_usage_bug+0xc0/0xc0
[ 2424.410311]  ? zap_class+0x640/0x640
[ 2424.414055]  ? __lock_acquire+0x62f/0x4c20
[ 2424.418298]  ? lock_acquire+0x1ed/0x520
[ 2424.422303]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2424.426919]  ? kasan_check_read+0x11/0x20
[ 2424.431069]  ? do_raw_spin_lock+0x14f/0x350
[ 2424.435400]  ? rwlock_bug.part.2+0x90/0x90
[ 2424.439658]  __handle_mm_fault+0x3be9/0x5be0
[ 2424.444086]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 2424.448937]  ? lock_is_held_type+0x210/0x210
[ 2424.453351]  ? perf_trace_lock+0x7a0/0x7a0
[ 2424.457588]  ? perf_trace_lock+0x7a0/0x7a0
[ 2424.461847]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2424.466801]  ? zap_class+0x640/0x640
[ 2424.470532]  ? zap_class+0x640/0x640
[ 2424.474258]  ? find_held_lock+0x36/0x1c0
[ 2424.478352]  ? handle_mm_fault+0x42a/0xc70
[ 2424.482606]  ? lock_downgrade+0x900/0x900
[ 2424.486760]  ? check_preemption_disabled+0x48/0x280
[ 2424.491783]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2424.496725]  ? kasan_check_read+0x11/0x20
[ 2424.500877]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2424.506157]  ? rcu_softirq_qs+0x20/0x20
[ 2424.510138]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2424.515249]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2424.520791]  ? check_preemption_disabled+0x48/0x280
[ 2424.525843]  handle_mm_fault+0x54f/0xc70
[ 2424.529915]  ? __handle_mm_fault+0x5be0/0x5be0
[ 2424.534508]  ? find_vma+0x34/0x190
[ 2424.538059]  __do_page_fault+0x5e8/0xe60
[ 2424.542142]  do_page_fault+0xf2/0x7e0
[ 2424.545947]  ? vmalloc_sync_all+0x30/0x30
[ 2424.550100]  ? error_entry+0x70/0xd0
[ 2424.553844]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2424.558863]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2424.563799]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2424.568658]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2424.573688]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2424.579164]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2424.584184]  ? page_fault+0x8/0x30
[ 2424.587743]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2424.592587]  ? page_fault+0x8/0x30
[ 2424.596128]  page_fault+0x1e/0x30
[ 2424.599578] RIP: 0023:0x807eefd
[ 2424.602863] Code: a3 6c 00 00 00 8b 55 e4 85 d2 0f 85 84 00 00 00 8b 45 e0 85 c0 74 cb 89 7d e4 89 c7 90 8b 1f 8b 43 08 85 c0 74 04 ff d0 8b 1f <f0> ff 4b 14 0f 94 c0 84 c0 74 38 8b 43 18 85 c0 74 31 83 c3 14 31
[ 2424.621763] RSP: 002b:000000000845fd80 EFLAGS: 00010246
[ 2424.627153] RAX: 0000000000000000 RBX: 00000000084627a4 RCX: 0000000000000000
[ 2424.634450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000845fd80
[ 2424.641715] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2424.648979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2424.656246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2424.688149] Task in /syz2 killed as a result of limit of /syz2
[ 2424.731230] memory: usage 307200kB, limit 307200kB, failcnt 146
[ 2424.741021] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2424.764788] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2424.788468] Memory cgroup stats for /syz2: cache:16496KB rss:262224KB rss_huge:247808KB shmem:16404KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:16396KB active_anon:262360KB inactive_file:4KB active_file:0KB unevictable:0KB
[ 2424.882404] Memory cgroup out of memory: Kill process 26500 (syz-executor2) score 1106 or sacrifice child
[ 2424.914699] Killed process 26500 (syz-executor2) total-vm:70252kB, anon-rss:2196kB, file-rss:33524kB, shmem-rss:0kB
16:58:25 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x4, 0x0)
ioctl$FITRIM(r0, 0xc0184908, &(0x7f0000000040)={0x4, 0xfffffffffffffffe})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x121100, 0x0)
ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000100))
ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000000c0)={0x100000000000000, 0x5000, 0x4, 0x5, 0x1b})
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="c6000000d634e3d1ff90788cab7638c57a50f65f142ab4cb156688a010c8b75efefc740d8d556a03c4a5fb9954cce0b9565b35de99dacc00699fd3f314a465ec22c418da325168ba5af9b1f1df7a8c0399cf4e1ca13a7c94da521cfde5b85ae84bf65ee39a9f8e1aef782b7bfa61c305c393ccc50c03b0dbd84753c53b75a0bfe8a3a0583a089d8c5edaafe7b030f05abfa810916c8c3379fc16acf0100daf2063f75e61fbbf29ccd461eaf8fe34184c628ea07b619252745bd4b1983aa13a5d67d31ce4c548edf5e0342cf8f556"], &(0x7f0000000240)=0xce)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r2, 0x7}, &(0x7f00000002c0)=0x8)

16:58:25 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000001134000000000000"], 0x14}}, 0x0)

16:58:25 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)="3ddbe33e099b040000000000000079626c6100", 0xffffffd3)
sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x16f)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'\x00', {0x2, 0x4e22, @rand_addr=0x6}})

16:58:25 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:25 executing program 5:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2)
ioctl$TUNGETFILTER(r0, 0x800854db, &(0x7f0000000200)=""/243)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x224002, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x7, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x2}}, 0x0)

16:58:25 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2425.275649] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0
[ 2425.288952] QAT: Invalid ioctl
[ 2425.295341] QAT: Invalid ioctl
[ 2425.303342] QAT: Invalid ioctl
[ 2425.313661] syz-executor2 cpuset=syz2 mems_allowed=0
[ 2425.329842] CPU: 1 PID: 31441 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #255
[ 2425.337224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2425.338174] QAT: Invalid ioctl
[ 2425.346583] Call Trace:
[ 2425.346606]  dump_stack+0x244/0x39d
[ 2425.346628]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2425.346648]  ? mark_held_locks+0x130/0x130
[ 2425.346662]  ? mark_held_locks+0x130/0x130
[ 2425.346697]  dump_header+0x27b/0xf72
[ 2425.346752]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2425.346777]  ? check_preemption_disabled+0x48/0x280
[ 2425.384246]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2425.389804]  ? pagefault_out_of_memory+0x197/0x197
[ 2425.394764]  ? debug_smp_processor_id+0x1c/0x20
[ 2425.399440]  ? perf_trace_lock+0x14d/0x7a0
[ 2425.403710]  ? debug_smp_processor_id+0x1c/0x20
[ 2425.408382]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2425.413323]  ? lock_is_held_type+0x210/0x210
[ 2425.417728]  ? perf_trace_lock+0x7a0/0x7a0
[ 2425.422020]  ? debug_smp_processor_id+0x1c/0x20
[ 2425.426722]  ? perf_trace_lock+0x14d/0x7a0
[ 2425.430960]  ? zap_class+0x640/0x640
[ 2425.434710]  ? print_usage_bug+0xc0/0xc0
[ 2425.438777]  ? lock_is_held_type+0x210/0x210
[ 2425.443666]  ? find_held_lock+0x36/0x1c0
[ 2425.448220]  ? mark_held_locks+0xc7/0x130
[ 2425.452385]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2425.457491]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2425.462614]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2425.467209]  ? trace_hardirqs_on+0xbd/0x310
[ 2425.471534]  ? kasan_check_read+0x11/0x20
[ 2425.475682]  ? ___ratelimit+0x3b4/0x672
[ 2425.479704]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2425.484836]  ? trace_hardirqs_on+0x310/0x310
[ 2425.489270]  ? lock_downgrade+0x900/0x900
[ 2425.493426]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2425.498565]  ? ___ratelimit+0x3b9/0x672
[ 2425.502564]  ? idr_get_free+0xf70/0xf70
[ 2425.506540]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2425.511053]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2425.515629]  oom_kill_process.cold.27+0x10/0x903
[ 2425.520389]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2425.524922]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2425.529522]  ? oom_evaluate_task+0x540/0x540
[ 2425.533966]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2425.539509]  ? cgroup_procs_next+0x70/0x70
[ 2425.543746]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2425.548241]  ? oom_badness+0xaa0/0xaa0
[ 2425.552135]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2425.556895]  ? mem_cgroup_iter_break+0x30/0x30
[ 2425.561491]  ? mark_held_locks+0xc7/0x130
[ 2425.565665]  out_of_memory+0xa84/0x1430
[ 2425.569661]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2425.574250]  ? kasan_check_read+0x11/0x20
[ 2425.578430]  ? oom_killer_disable+0x3a0/0x3a0
[ 2425.582983]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2425.587855]  ? memory_oom_group_write+0x160/0x160
[ 2425.587868]  ? mem_cgroup_try_charge+0x627/0xe20
[ 2425.587906]  ? page_counter_try_charge+0x1c1/0x220
[ 2425.587925]  try_charge+0xda9/0x1700
[ 2425.587939]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2425.587968]  ? kasan_check_read+0x11/0x20
[ 2425.588003]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2425.602553]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2425.625515]  ? lock_page_memcg+0x350/0x350
[ 2425.629769]  ? lock_acquire+0x1ed/0x520
[ 2425.633767]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2425.639164]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2425.644711]  ? check_preemption_disabled+0x48/0x280
[ 2425.649743]  ? kasan_check_read+0x11/0x20
[ 2425.653906]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2425.659193]  ? rcu_softirq_qs+0x20/0x20
[ 2425.663222]  mem_cgroup_try_charge+0x627/0xe20
[ 2425.667830]  ? mem_cgroup_protected+0xa60/0xa60
[ 2425.672518]  ? print_usage_bug+0xc0/0xc0
[ 2425.676593]  ? isolate_lru_pages.isra.58+0xc7d/0x19e0
[ 2425.681798]  ? zap_class+0x640/0x640
[ 2425.685552]  ? find_held_lock+0x36/0x1c0
[ 2425.689624]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2425.695182]  mem_cgroup_try_charge_delay+0x1d/0xa0
[ 2425.700127]  wp_page_copy+0x51d/0x24f0
[ 2425.704057]  ? print_usage_bug+0xc0/0xc0
[ 2425.708169]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2425.713453]  ? kasan_check_read+0x11/0x20
[ 2425.717619]  ? follow_pfn+0x2e0/0x2e0
[ 2425.721433]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2425.726986]  ? reuse_swap_page+0x4bd/0x1520
[ 2425.731316]  ? swp_swapcount+0x530/0x530
[ 2425.735385]  ? __lock_acquire+0x62f/0x4c20
[ 2425.739622]  ? page_add_new_anon_rmap+0xb70/0xb70
[ 2425.744475]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2425.750090]  ? check_preemption_disabled+0x48/0x280
[ 2425.755158]  ? debug_smp_processor_id+0x1c/0x20
[ 2425.759857]  ? perf_trace_lock+0x14d/0x7a0
[ 2425.764127]  ? lock_is_held_type+0x210/0x210
[ 2425.768548]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2425.773491]  ? zap_class+0x640/0x640
[ 2425.777212]  ? mark_held_locks+0x130/0x130
[ 2425.781458]  ? zap_class+0x640/0x640
[ 2425.785204]  ? lock_acquire+0x1ed/0x520
[ 2425.789189]  ? find_held_lock+0x36/0x1c0
[ 2425.793274]  ? do_wp_page+0x518/0x2920
[ 2425.797170]  ? lock_downgrade+0x900/0x900
[ 2425.801348]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2425.805729]  ? kasan_check_read+0x11/0x20
[ 2425.809899]  ? do_raw_spin_unlock+0xa7/0x330
[ 2425.814310]  ? do_raw_spin_trylock+0x270/0x270
[ 2425.818916]  ? __pte_alloc_kernel+0x220/0x220
[ 2425.823441]  do_wp_page+0x520/0x2920
[ 2425.827165]  ? finish_mkwrite_fault+0x650/0x650
[ 2425.831846]  ? filemap_map_pages+0xd6b/0x1a20
[ 2425.836404]  ? lock_downgrade+0x900/0x900
[ 2425.840553]  ? check_preemption_disabled+0x48/0x280
[ 2425.845570]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2425.850509]  ? kasan_check_read+0x11/0x20
[ 2425.854663]  ? __lock_acquire+0x62f/0x4c20
[ 2425.858941]  ? mark_held_locks+0x130/0x130
[ 2425.863196]  ? find_get_entries_tag+0x1400/0x1400
[ 2425.868095]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2425.873642]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2425.879210]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2425.884769]  ? check_preemption_disabled+0x48/0x280
[ 2425.889797]  ? debug_smp_processor_id+0x1c/0x20
[ 2425.894492]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2425.899427]  ? lock_is_held_type+0x210/0x210
[ 2425.903876]  ? print_usage_bug+0xc0/0xc0
[ 2425.907944]  ? print_usage_bug+0xc0/0xc0
[ 2425.912005]  ? zap_class+0x640/0x640
[ 2425.915780]  ? __lock_acquire+0x62f/0x4c20
[ 2425.920049]  ? lock_acquire+0x1ed/0x520
[ 2425.924029]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2425.928624]  ? kasan_check_read+0x11/0x20
[ 2425.932777]  ? do_raw_spin_lock+0x14f/0x350
[ 2425.937156]  ? rwlock_bug.part.2+0x90/0x90
[ 2425.941394]  ? do_raw_spin_trylock+0x270/0x270
[ 2425.946015]  __handle_mm_fault+0x3be9/0x5be0
[ 2425.950470]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 2425.955323]  ? lock_is_held_type+0x210/0x210
[ 2425.959739]  ? perf_trace_lock+0x7a0/0x7a0
[ 2425.963982]  ? perf_trace_lock+0x7a0/0x7a0
[ 2425.968218]  ? lock_is_held_type+0x210/0x210
[ 2425.972646]  ? zap_class+0x640/0x640
[ 2425.976360]  ? zap_class+0x640/0x640
[ 2425.980085]  ? find_held_lock+0x36/0x1c0
[ 2425.984201]  ? handle_mm_fault+0x42a/0xc70
[ 2425.988472]  ? lock_downgrade+0x900/0x900
[ 2425.992637]  ? check_preemption_disabled+0x48/0x280
[ 2425.997657]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2426.002588]  ? kasan_check_read+0x11/0x20
[ 2426.006736]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2426.012043]  ? rcu_softirq_qs+0x20/0x20
[ 2426.016048]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2426.021195]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2426.026739]  ? check_preemption_disabled+0x48/0x280
[ 2426.031764]  handle_mm_fault+0x54f/0xc70
[ 2426.035844]  ? __handle_mm_fault+0x5be0/0x5be0
[ 2426.040441]  ? find_vma+0x34/0x190
[ 2426.043988]  __do_page_fault+0x5e8/0xe60
[ 2426.048083]  do_page_fault+0xf2/0x7e0
[ 2426.051904]  ? vmalloc_sync_all+0x30/0x30
[ 2426.056075]  ? error_entry+0x70/0xd0
[ 2426.059797]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2426.064833]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2426.069782]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2426.074663]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2426.079713]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2426.085180]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 2426.090203]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2426.095745]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2426.100766]  ? page_fault+0x8/0x30
[ 2426.104329]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2426.109201]  ? page_fault+0x8/0x30
[ 2426.112744]  page_fault+0x1e/0x30
[ 2426.116195] RIP: 0023:0x807edf7
[ 2426.119493] Code: 02 00 00 85 ff 0f 85 e8 00 00 00 65 8b 0d 08 00 00 00 65 a1 68 00 00 00 39 45 dc 0f 84 24 02 00 00 a1 80 36 46 08 85 c0 74 03 <83> 00 04 65 a1 68 00 00 00 65 a3 6c 00 00 00 0f 31 65 a3 1c 02 00
[ 2426.138445] RSP: 002b:000000000845fd80 EFLAGS: 00010206
[ 2426.143828] RAX: 00000000084633e8 RBX: 0000000001200011 RCX: 000000000974c900
[ 2426.151124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2426.158397] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2426.165672] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2426.172997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2426.891158] Task in /syz2 killed as a result of limit of /syz2
[ 2426.898580] memory: usage 304900kB, limit 307200kB, failcnt 146
[ 2426.912396] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2426.919373] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2426.926189] Memory cgroup stats for /syz2: cache:16496KB rss:260092KB rss_huge:245760KB shmem:16404KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:16396KB active_anon:260204KB inactive_file:4KB active_file:0KB unevictable:0KB
[ 2426.948756] Memory cgroup out of memory: Kill process 26666 (syz-executor2) score 1106 or sacrifice child
[ 2426.959017] Killed process 26666 (syz-executor2) total-vm:70252kB, anon-rss:2196kB, file-rss:33516kB, shmem-rss:0kB
[ 2427.005363] syz-executor1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000
[ 2427.041442] syz-executor1 cpuset=syz1 mems_allowed=0
[ 2427.059428] CPU: 0 PID: 31494 Comm: syz-executor1 Not tainted 4.20.0-rc4+ #255
[ 2427.066804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2427.076169] Call Trace:
[ 2427.078770]  dump_stack+0x244/0x39d
[ 2427.082408]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2427.087630]  dump_header+0x27b/0xf72
[ 2427.091372]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2427.096935]  ? check_preemption_disabled+0x48/0x280
[ 2427.101955]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2427.107494]  ? pagefault_out_of_memory+0x197/0x197
[ 2427.112424]  ? print_usage_bug+0xc0/0xc0
[ 2427.116487]  ? perf_trace_lock+0x14d/0x7a0
[ 2427.120722]  ? debug_smp_processor_id+0x1c/0x20
[ 2427.125432]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2427.130384]  ? lock_is_held_type+0x210/0x210
[ 2427.134798]  ? perf_trace_lock+0x7a0/0x7a0
[ 2427.139068]  ? debug_smp_processor_id+0x1c/0x20
[ 2427.143742]  ? perf_trace_lock+0x14d/0x7a0
[ 2427.147999]  ? mark_held_locks+0xc7/0x130
[ 2427.152169]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2427.156933]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2427.161516]  ? retint_kernel+0x2d/0x2d
[ 2427.165403]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2427.170338]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2427.175099]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2427.180592]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2427.185365]  ? retint_kernel+0x2d/0x2d
[ 2427.189292]  ? _raw_spin_unlock_irqrestore+0xaf/0xd0
[ 2427.194401]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2427.199514]  ? ___ratelimit+0x3b9/0x672
[ 2427.203524]  ? idr_get_free+0xf70/0xf70
[ 2427.207527]  oom_kill_process.cold.27+0x10/0x903
[ 2427.212311]  ? _raw_spin_unlock_irq+0x56/0x80
[ 2427.216838]  ? oom_evaluate_task+0x540/0x540
[ 2427.221252]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2427.226801]  ? cgroup_procs_next+0x70/0x70
[ 2427.231130]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2427.235628]  ? oom_badness+0xaa0/0xaa0
[ 2427.239550]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2427.244312]  ? mem_cgroup_iter_break+0x30/0x30
[ 2427.248934]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2427.253721]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2427.259185]  out_of_memory+0xa84/0x1430
[ 2427.263175]  ? oom_killer_disable+0x3a0/0x3a0
[ 2427.267705]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2427.272572]  ? memory_oom_group_write+0x160/0x160
[ 2427.277447]  try_charge+0xda9/0x1700
[ 2427.281255]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2427.285937]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2427.290871]  ? kasan_check_read+0x11/0x20
[ 2427.295027]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2427.300368]  ? rcu_softirq_qs+0x20/0x20
[ 2427.304363]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2427.309911]  ? __kernel_text_address+0xd/0x40
[ 2427.314420]  ? lock_page_memcg+0x350/0x350
[ 2427.318676]  ? lock_acquire+0x1ed/0x520
[ 2427.322662]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2427.328030]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2427.333587]  ? check_preemption_disabled+0x48/0x280
[ 2427.338618]  memcg_kmem_charge_memcg+0x7c/0x120
[ 2427.343315]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 2427.347839]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2427.352492]  memcg_kmem_charge+0x149/0x350
[ 2427.356739]  __alloc_pages_nodemask+0x75e/0xea0
[ 2427.361415]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2427.366719]  ? lock_downgrade+0x900/0x900
[ 2427.370941]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[ 2427.375988]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2427.381564]  ? check_preemption_disabled+0x48/0x280
[ 2427.386651]  ? rcu_lockdep_current_cpu_online+0x1a4/0x210
[ 2427.392194]  ? rcu_pm_notify+0xc0/0xc0
[ 2427.396096]  ? copy_process+0x2026/0x87a0
[ 2427.400256]  ? rcu_read_lock_sched_held+0x14f/0x180
[ 2427.405279]  ? kmem_cache_alloc_node+0x349/0x730
[ 2427.410059]  copy_process+0xa09/0x87a0
[ 2427.414017]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2427.419563]  ? __perf_event_task_sched_in+0x2a9/0xb60
[ 2427.424787]  ? find_held_lock+0x36/0x1c0
[ 2427.428910]  ? __cleanup_sighand+0x70/0x70
[ 2427.433176]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2427.437682]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2427.442275]  ? trace_hardirqs_on+0xbd/0x310
[ 2427.446770]  ? kasan_check_read+0x11/0x20
[ 2427.450929]  ? finish_task_switch+0x1f4/0x910
[ 2427.455460]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2427.460573]  ? compat_start_thread+0x80/0x80
[ 2427.465043]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2427.470639]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2427.475157]  ? finish_task_switch+0x1f4/0x910
[ 2427.479655]  ? finish_task_switch+0x1b4/0x910
[ 2427.484152]  ? __switch_to_asm+0x34/0x70
[ 2427.488239]  ? preempt_notifier_register+0x200/0x200
[ 2427.493374]  ? __switch_to_asm+0x34/0x70
[ 2427.497435]  ? __switch_to_asm+0x34/0x70
[ 2427.501506]  ? __switch_to_asm+0x40/0x70
[ 2427.505582]  ? __switch_to_asm+0x34/0x70
[ 2427.509675]  ? __switch_to_asm+0x40/0x70
[ 2427.513777]  ? __switch_to_asm+0x34/0x70
[ 2427.517883]  ? __switch_to_asm+0x40/0x70
[ 2427.521962]  ? __switch_to_asm+0x34/0x70
[ 2427.526025]  ? __switch_to_asm+0x34/0x70
[ 2427.530091]  ? __switch_to_asm+0x40/0x70
[ 2427.534171]  ? __switch_to_asm+0x34/0x70
[ 2427.538231]  ? __switch_to_asm+0x40/0x70
[ 2427.542292]  ? __switch_to_asm+0x34/0x70
[ 2427.546356]  ? __switch_to_asm+0x40/0x70
[ 2427.550428]  ? __schedule+0x8d7/0x21d0
[ 2427.554332]  ? __sched_text_start+0x8/0x8
[ 2427.558488]  ? retint_kernel+0x2d/0x2d
[ 2427.562406]  ? lock_release+0x51d/0xa00
[ 2427.566393]  ? futex_wait_queue_me+0x2ac/0x840
[ 2427.571003]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2427.575767]  ? preempt_schedule+0x4d/0x60
[ 2427.579926]  ? preempt_schedule_common+0x1f/0xe0
[ 2427.584689]  ? preempt_schedule+0x4d/0x60
[ 2427.588851]  ? ___preempt_schedule+0x16/0x18
[ 2427.593264]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2427.598028]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2427.602614]  ? retint_kernel+0x2d/0x2d
[ 2427.606505]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2427.611437]  ? futex_wait_queue_me+0x55d/0x840
[ 2427.616040]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2427.620804]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2427.626298]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2427.631095]  ? retint_kernel+0x2d/0x2d
[ 2427.634994]  ? __sanitizer_cov_trace_switch+0x53/0x90
[ 2427.640206]  ? drop_futex_key_refs.isra.14+0x6d/0xe0
[ 2427.645345]  ? futex_wait+0x5ec/0xa50
[ 2427.649160]  ? print_usage_bug+0xc0/0xc0
[ 2427.653238]  ? futex_wait_setup+0x3e0/0x3e0
[ 2427.657580]  ? __sanitizer_cov_trace_switch+0x53/0x90
[ 2427.662799]  ? drop_futex_key_refs.isra.14+0x6d/0xe0
[ 2427.667948]  ? futex_wake+0x304/0x760
[ 2427.671768]  ? __lock_acquire+0x62f/0x4c20
[ 2427.676033]  ? mark_held_locks+0x130/0x130
[ 2427.680305]  ? do_futex+0x249/0x26d0
[ 2427.684022]  ? mark_held_locks+0x130/0x130
[ 2427.688261]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2427.693043]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2427.698590]  ? check_preemption_disabled+0x48/0x280
[ 2427.703613]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2427.709171]  ? check_preemption_disabled+0x48/0x280
[ 2427.714205]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2427.719750]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2427.724516]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2427.729101]  ? retint_kernel+0x2d/0x2d
[ 2427.733028]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2427.737977]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2427.742735]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2427.748187]  ? lock_is_held_type+0x210/0x210
[ 2427.752616]  ? perf_trace_lock+0x7a0/0x7a0
[ 2427.756896]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2427.761711]  ? retint_kernel+0x2d/0x2d
[ 2427.765616]  ? lock_release+0x51d/0xa00
[ 2427.769606]  _do_fork+0x1cb/0x11d0
[ 2427.773162]  ? fork_idle+0x1d0/0x1d0
[ 2427.776910]  ? kasan_check_read+0x11/0x20
[ 2427.781059]  ? _copy_to_user+0xc8/0x110
[ 2427.785072]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2427.790626]  ? put_old_timespec32+0x110/0x280
[ 2427.795127]  ? get_old_timespec32+0x2a0/0x2a0
[ 2427.799625]  ? do_fast_syscall_32+0x150/0xfb2
[ 2427.804123]  ? do_fast_syscall_32+0x150/0xfb2
[ 2427.808621]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2427.813208]  ? trace_hardirqs_on+0xbd/0x310
[ 2427.817535]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2427.823101]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2427.827689]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2427.832841]  __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2427.837902]  do_fast_syscall_32+0x34d/0xfb2
[ 2427.842287]  ? do_int80_syscall_32+0x890/0x890
[ 2427.846897]  ? entry_SYSENTER_compat+0x68/0x7f
[ 2427.851496]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2427.856524]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2427.861379]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2427.866237]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2427.871271]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2427.876352]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2427.881215]  entry_SYSENTER_compat+0x70/0x7f
[ 2427.885630] RIP: 0023:0xf7fb2a29
[ 2427.889008] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 2427.907919] RSP: 002b:00000000f5fae0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000078
[ 2427.915636] RAX: ffffffffffffffda RBX: 0000000002001ff9 RCX: 0000000000000000
[ 2427.922912] RDX: 0000000099999999 RSI: 0000000020000180 RDI: 00000000ffffffff
[ 2427.930187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2427.937478] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2427.944771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:58:28 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x0, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:28 executing program 3:
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='ext4\x00', 0x0, 0x0)

16:58:28 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000007fffffff00000000"], 0x14}}, 0x0)

16:58:28 executing program 5:
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
shutdown(0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
ppoll(&(0x7f00000003c0)=[{}], 0x1, &(0x7f0000000400)={0x0, 0x1c9c380}, &(0x7f0000000440), 0x8)
socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$read(0xb, r0, &(0x7f0000000100)=""/143, 0xfffffefd)

16:58:28 executing program 0:
r0 = socket(0x1e, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x6, 0x3ff, 0x1000, 0x7}, 0x10)
sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000726cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0)

[ 2427.968753] Task in /syz1 killed as a result of limit of /syz1
[ 2428.003131] memory: usage 307196kB, limit 307200kB, failcnt 551
16:58:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]})
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0)
ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/249)

[ 2428.033890] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2428.040667] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
16:58:28 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x0, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:28 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aa0b00000800450000300000000000009078ac1414bbac141400030f907800000000450000000000000000000000ac1414aaac1414000000000000000000"], &(0x7f0000000000))
getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/58, 0x3a)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x6, 0x2, 0x1})
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netlink\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=""/10, 0x9}, 0x28)
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)

[ 2428.147064] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 2428.153460] Memory cgroup stats for /syz1: cache:16KB rss:270176KB rss_huge:249856KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:270140KB inactive_file:0KB active_file:0KB unevictable:0KB
16:58:28 executing program 0:
r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x20, 0x2, 0xd0, 0x2b, r0, 0x7f}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000100)=""/108}, 0x48)

[ 2428.201566] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
16:58:28 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000000c0)={0x7a52, 0x3, 0xd4b, 0x8})
r1 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a")
ioctl$TIOCSTI(r1, 0x5412, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, &(0x7f0000000180), 0x8402)
getsockopt$inet6_dccp_int(r1, 0x21, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x4)

[ 2428.322684] Memory cgroup out of memory: Kill process 27458 (syz-executor1) score 1106 or sacrifice child
16:58:28 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f00000000c0)="5500000019007f5300fe01b2a4a280930a600000ffa84335910000003900090035000c00ffd1000019000500fe800000000000dc1338d54400136ef75afb83de448daa7227c43ab8220000060cec4fab91d4000000", 0x55}], 0x1, &(0x7f0000000180)}, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x260bc2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000001c0)={0x1fffffffe00, 0x100000001, 0x7707, 0x0, 0x0, [], [], [], 0x8})
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)

[ 2428.394757] Killed process 27458 (syz-executor1) total-vm:70252kB, anon-rss:2208kB, file-rss:33464kB, shmem-rss:0kB
[ 2428.555839] oom_reaper: reaped process 31489 (syz-executor1), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB
[ 2428.556561] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0
16:58:28 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000001000000000000000"], 0x14}}, 0x0)

16:58:28 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:28 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0)
r3 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000e, 0x3032, r2, 0x3c)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc0, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000000), &(0x7f0000000080)=[0x0, 0x28]}, 0xffff}}, @exit_looper, @register_looper, @exit_looper, @acquire_done={0x40106309, r3}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000140)=[@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x1, 0x4, 0x17}], &(0x7f0000000180)=[0x30]}, 0x10000}}, @release={0x40046306, 0x2}], 0x1000, 0x0, &(0x7f0000000300)="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"})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000))
sendfile(r1, r2, 0x0, 0x1)

[ 2428.671207] syz-executor2 cpuset=syz2 mems_allowed=0
[ 2428.676357] CPU: 1 PID: 24537 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #255
[ 2428.683726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2428.693081] Call Trace:
[ 2428.693105]  dump_stack+0x244/0x39d
[ 2428.693128]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2428.693149]  ? mark_held_locks+0x130/0x130
[ 2428.693182]  ? mark_held_locks+0x130/0x130
[ 2428.704592]  dump_header+0x27b/0xf72
[ 2428.704617]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2428.704649]  ? check_preemption_disabled+0x48/0x280
[ 2428.704665]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2428.704683]  ? pagefault_out_of_memory+0x197/0x197
[ 2428.737821]  ? debug_smp_processor_id+0x1c/0x20
[ 2428.742509]  ? perf_trace_lock+0x14d/0x7a0
[ 2428.746749]  ? debug_smp_processor_id+0x1c/0x20
[ 2428.751424]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2428.756381]  ? lock_is_held_type+0x210/0x210
[ 2428.760800]  ? perf_trace_lock+0x7a0/0x7a0
[ 2428.765052]  ? debug_smp_processor_id+0x1c/0x20
16:58:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000067c0), &(0x7f0000006800)=0xc)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a4c0)=[{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000000bc0)}], 0x1, &(0x7f0000002d40)}], 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_FPU(r2, 0x5421, &(0x7f0000000080)={[], 0x100000000, 0x2, 0xae, 0x0, 0x8000, 0x0, 0xf000, [], 0x298})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"})
ioctl$KVM_SET_MP_STATE(r2, 0x5460, &(0x7f0000000040)=0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1, 0x0, [{0x0, 0x3, 0x0, [], 0x1ff}]}})

[ 2428.769724]  ? perf_trace_lock+0x14d/0x7a0
[ 2428.773964]  ? zap_class+0x640/0x640
[ 2428.777716]  ? print_usage_bug+0xc0/0xc0
[ 2428.781793]  ? lock_is_held_type+0x210/0x210
[ 2428.786222]  ? find_held_lock+0x36/0x1c0
[ 2428.790291]  ? mark_held_locks+0xc7/0x130
[ 2428.794458]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2428.799575]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2428.804720]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2428.809386]  ? trace_hardirqs_on+0xbd/0x310
[ 2428.813718]  ? kasan_check_read+0x11/0x20
[ 2428.817881]  ? ___ratelimit+0x3b4/0x672
16:58:29 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00')
exit(0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00')
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @loopback}, &(0x7f0000000040)=0xc)
write$UHID_GET_REPORT_REPLY(r1, 0x0, 0x0)

[ 2428.821875]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2428.826983]  ? trace_hardirqs_on+0x310/0x310
[ 2428.831412]  ? lock_downgrade+0x900/0x900
[ 2428.835568]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2428.840678]  ? ___ratelimit+0x3b9/0x672
[ 2428.844660]  ? idr_get_free+0xf70/0xf70
[ 2428.848662]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2428.853163]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2428.857704]  oom_kill_process.cold.27+0x10/0x903
[ 2428.862484]  ? _raw_spin_unlock_irq+0x27/0x80
[ 2428.866985]  ? lockdep_hardirqs_on+0x3bb/0x5b0
16:58:29 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x0, 0x4004)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0)
ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8})
socket$inet(0x10, 0x3, 0x0)
ioctl$RTC_AIE_ON(r0, 0x7001)
ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0245628, &(0x7f0000000340)={0x7, 0x9, 0x80000000, [], &(0x7f0000000100)})
r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x5, 0x1ffe)
setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4)
select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400})
r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0)
r5 = dup2(r4, r4)
readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1)
ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd=<r6=>0xffffffffffffffff, 0x4})
r7 = getpid()
fcntl$getownex(r6, 0x10, &(0x7f0000000380)={0x0, <r8=>0x0})
kcmp(r7, r8, 0x1, r5, r4)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000680))
fcntl$getown(r0, 0x9)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56)
r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
ioctl$KVM_SET_NR_MMU_PAGES(r9, 0x400c920a, 0x814fffd)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10)

[ 2428.867023]  ? oom_evaluate_task+0x540/0x540
[ 2428.867041]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2428.881583]  ? cgroup_procs_next+0x70/0x70
[ 2428.885854]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2428.890381]  ? oom_badness+0xaa0/0xaa0
[ 2428.890413]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2428.890445]  ? mem_cgroup_iter_break+0x30/0x30
[ 2428.890490]  ? mark_held_locks+0xc7/0x130
[ 2428.907873]  out_of_memory+0xa84/0x1430
[ 2428.911897]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2428.916537]  ? kasan_check_read+0x11/0x20
[ 2428.920694]  ? oom_killer_disable+0x3a0/0x3a0
[ 2428.925233]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2428.930128]  ? memory_oom_group_write+0x160/0x160
[ 2428.935030]  ? memcg_kmem_charge_memcg+0x7c/0x120
[ 2428.935056]  ? page_counter_try_charge+0x1c1/0x220
[ 2428.935077]  try_charge+0xda9/0x1700
[ 2428.935117]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2428.948625]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2428.948640]  ? kasan_check_read+0x11/0x20
[ 2428.948654]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2428.948672]  ? rcu_softirq_qs+0x20/0x20
16:58:29 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000440)={0x0, 0x0, 0x1, r0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2428.971680]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2428.977226]  ? print_usage_bug+0xc0/0xc0
[ 2428.981309]  ? lock_page_memcg+0x350/0x350
[ 2428.985565]  ? lock_acquire+0x1ed/0x520
[ 2428.989550]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2428.994918]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2429.000476]  ? check_preemption_disabled+0x48/0x280
[ 2429.005521]  memcg_kmem_charge_memcg+0x7c/0x120
[ 2429.010224]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 2429.014779]  memcg_kmem_charge+0x149/0x350
[ 2429.019045]  __alloc_pages_nodemask+0x75e/0xea0
[ 2429.023730]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2429.023747]  ? check_preemption_disabled+0x48/0x280
[ 2429.023766]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[ 2429.023780]  ? debug_smp_processor_id+0x1c/0x20
[ 2429.023795]  ? perf_trace_lock+0x14d/0x7a0
[ 2429.023820]  ? debug_smp_processor_id+0x1c/0x20
[ 2429.023840]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2429.057945]  ? lock_is_held_type+0x210/0x210
[ 2429.062440]  ? lock_is_held_type+0x210/0x210
[ 2429.066907]  ? print_usage_bug+0xc0/0xc0
[ 2429.071006]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2429.076591]  alloc_pages_current+0x173/0x350
[ 2429.081015]  pte_alloc_one+0x1b/0x1a0
[ 2429.084839]  __pte_alloc+0x2a/0x350
[ 2429.088480]  copy_page_range+0x2017/0x2ee0
[ 2429.089101] ==================================================================
[ 2429.092721]  ? mark_held_locks+0x130/0x130
[ 2429.092763]  ? __pmd_alloc+0x450/0x450
[ 2429.100402] BUG: KASAN: global-out-of-bounds in tpg_print_str_4+0xbc9/0xd70
[ 2429.100416] Read of size 1 at addr ffffffff88632c50 by task vivid-000-vid-c/31572
[ 2429.104653]  ? __rb_insert_augmented+0x3b2/0x1890
[ 2429.108514] 
[ 2429.115606]  ? lock_is_held_type+0x210/0x210
[ 2429.134053]  ? rb_insert_color_cached+0x14b0/0x14b0
[ 2429.139074]  ? save_stack+0xa9/0xd0
[ 2429.142702]  ? zap_class+0x640/0x640
[ 2429.146415]  ? kasan_kmalloc+0xc7/0xe0
[ 2429.150302]  ? kasan_slab_alloc+0x12/0x20
[ 2429.154451]  ? kmem_cache_alloc+0x12e/0x730
[ 2429.158776]  ? zap_class+0x640/0x640
[ 2429.162500]  ? __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2429.167696]  ? do_fast_syscall_32+0x34d/0xfb2
[ 2429.172203]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2429.176806]  ? find_held_lock+0x36/0x1c0
[ 2429.180928]  ? anon_vma_fork+0x5ef/0x820
[ 2429.184994]  ? lock_downgrade+0x900/0x900
[ 2429.189156]  ? lock_release+0xa00/0xa00
[ 2429.193149]  ? perf_trace_sched_process_exec+0x860/0x860
[ 2429.198621]  ? __lock_is_held+0xb5/0x140
[ 2429.202697]  ? up_write+0x7b/0x220
[ 2429.206240]  ? down_write_nested+0x130/0x130
[ 2429.210667]  ? anon_vma_interval_tree_insert+0x2c9/0x370
[ 2429.216145]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2429.221162]  ? vma_compute_subtree_gap+0x160/0x240
[ 2429.226103]  ? validate_mm_rb+0xaa/0xc0
[ 2429.230103]  ? __vma_link_rb+0x26c/0x370
[ 2429.234185]  copy_process+0x45e9/0x87a0
[ 2429.238200]  ? __cleanup_sighand+0x70/0x70
[ 2429.242450]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2429.247997]  ? check_preemption_disabled+0x48/0x280
[ 2429.253031]  ? zap_class+0x640/0x640
[ 2429.256792]  ? perf_trace_lock+0x14d/0x7a0
[ 2429.261082]  ? lock_is_held_type+0x210/0x210
[ 2429.265491]  ? __lock_is_held+0xb5/0x140
[ 2429.269563]  ? zap_class+0x640/0x640
[ 2429.273290]  ? __lock_acquire+0x62f/0x4c20
[ 2429.277543]  ? __account_cfs_rq_runtime+0x790/0x790
[ 2429.282572]  ? find_held_lock+0x36/0x1c0
[ 2429.286660]  ? do_wp_page+0x127c/0x2920
[ 2429.290639]  ? lock_downgrade+0x900/0x900
[ 2429.294803]  ? wake_up_page_bit+0x6f0/0x6f0
[ 2429.299188]  ? kasan_check_read+0x11/0x20
[ 2429.303359]  ? do_raw_spin_unlock+0xa7/0x330
[ 2429.307788]  ? do_raw_spin_trylock+0x270/0x270
[ 2429.312401]  ? pgd_free+0x380/0x380
[ 2429.316029]  ? lock_is_held_type+0x210/0x210
[ 2429.320460]  ? _raw_spin_unlock+0x2c/0x50
[ 2429.324629]  ? do_wp_page+0x528/0x2920
[ 2429.328539]  ? finish_mkwrite_fault+0x650/0x650
[ 2429.333212]  ? __lock_acquire+0x62f/0x4c20
[ 2429.337453]  ? mark_held_locks+0x130/0x130
[ 2429.341696]  ? find_held_lock+0x36/0x1c0
[ 2429.345800]  ? __lock_acquire+0x62f/0x4c20
[ 2429.350065]  ? __lock_acquire+0x62f/0x4c20
[ 2429.354316]  ? perf_trace_lock+0x14d/0x7a0
[ 2429.358590]  ? debug_smp_processor_id+0x1c/0x20
[ 2429.363289]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2429.368240]  ? trace_hardirqs_on+0xbd/0x310
[ 2429.372577]  ? mark_held_locks+0x130/0x130
[ 2429.376837]  ? perf_trace_lock+0x14d/0x7a0
[ 2429.381102]  ? debug_smp_processor_id+0x1c/0x20
[ 2429.385795]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2429.391354]  ? check_preemption_disabled+0x48/0x280
[ 2429.396422]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2429.401961]  ? check_preemption_disabled+0x48/0x280
[ 2429.406980]  ? __lock_is_held+0xb5/0x140
[ 2429.411069]  ? print_usage_bug+0xc0/0xc0
[ 2429.415169]  ? print_usage_bug+0xc0/0xc0
[ 2429.419261]  ? find_held_lock+0x36/0x1c0
[ 2429.423340]  ? __lock_acquire+0x62f/0x4c20
[ 2429.427571]  ? zap_class+0x640/0x640
[ 2429.431372]  ? ktime_get_coarse_real_ts64+0x273/0x370
[ 2429.436583]  ? mark_held_locks+0x130/0x130
[ 2429.440835]  ? lock_acquire+0x1ed/0x520
[ 2429.445315]  ? __handle_mm_fault+0x1fa9/0x5be0
[ 2429.450434]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2429.455976]  ? check_preemption_disabled+0x48/0x280
[ 2429.461055]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2429.466650]  ? check_preemption_disabled+0x48/0x280
[ 2429.471670]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2429.477218]  ? debug_smp_processor_id+0x1c/0x20
[ 2429.481891]  ? perf_trace_lock+0x14d/0x7a0
[ 2429.486151]  ? debug_smp_processor_id+0x1c/0x20
[ 2429.490835]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2429.495790]  ? lock_is_held_type+0x210/0x210
[ 2429.500237]  ? perf_trace_lock+0x7a0/0x7a0
[ 2429.504496]  ? zap_class+0x640/0x640
[ 2429.508218]  ? zap_class+0x640/0x640
[ 2429.511990]  ? lock_is_held_type+0x210/0x210
[ 2429.516403]  ? perf_trace_lock+0x7a0/0x7a0
[ 2429.520681]  ? find_held_lock+0x36/0x1c0
[ 2429.524783]  _do_fork+0x1cb/0x11d0
[ 2429.528376]  ? fork_idle+0x1d0/0x1d0
[ 2429.532113]  ? __do_page_fault+0x620/0xe60
[ 2429.536382]  ? kasan_check_read+0x11/0x20
[ 2429.540541]  ? _copy_to_user+0xc8/0x110
[ 2429.544531]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2429.550081]  ? put_old_timespec32+0x110/0x280
[ 2429.554600]  ? get_old_timespec32+0x2a0/0x2a0
[ 2429.559107]  ? do_fast_syscall_32+0x150/0xfb2
[ 2429.563608]  ? do_fast_syscall_32+0x150/0xfb2
[ 2429.568129]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2429.572717]  ? trace_hardirqs_on+0xbd/0x310
[ 2429.577039]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2429.582576]  ? entry_SYSENTER_compat+0x70/0x7f
[ 2429.587159]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2429.592276]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2429.597894]  __ia32_compat_sys_x86_clone+0xbc/0x140
[ 2429.602932]  do_fast_syscall_32+0x34d/0xfb2
[ 2429.607279]  ? do_int80_syscall_32+0x890/0x890
[ 2429.611871]  ? entry_SYSENTER_compat+0x68/0x7f
[ 2429.616458]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2429.621481]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2429.626332]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2429.631180]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2429.636206]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2429.641244]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2429.646118]  entry_SYSENTER_compat+0x70/0x7f
[ 2429.650525] RIP: 0023:0xf7f49a29
[ 2429.653906] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 2429.672816] RSP: 002b:000000000845fd70 EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[ 2429.680541] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000
[ 2429.687851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000974c968
[ 2429.695145] RBP: 000000000845fdc8 R08: 0000000000000000 R09: 0000000000000000
[ 2429.702425] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 2429.709693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2429.716992] CPU: 0 PID: 31572 Comm: vivid-000-vid-c Not tainted 4.20.0-rc4+ #255
[ 2429.724552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2429.733949] Call Trace:
[ 2429.736546]  dump_stack+0x244/0x39d
[ 2429.740204]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2429.745415]  ? printk+0xa7/0xcf
[ 2429.748701]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[ 2429.753456]  ? enable_ptr_key_workfn+0x30/0x30
[ 2429.758062]  print_address_description.cold.7+0x58/0x1ff
[ 2429.763532]  kasan_report.cold.8+0x242/0x309
[ 2429.763821] Task in /syz2 killed as a result of limit of /syz2
[ 2429.767950]  ? tpg_print_str_4+0xbc9/0xd70
[ 2429.767969]  __asan_report_load1_noabort+0x14/0x20
[ 2429.767985]  tpg_print_str_4+0xbc9/0xd70
[ 2429.774044] memory: usage 307200kB, limit 307200kB, failcnt 170
[ 2429.778194]  ? vsnprintf+0x1340/0x1b60
[ 2429.778214]  tpg_gen_text+0x4ba/0x540
[ 2429.783269] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2429.787427]  vivid_fillbuff+0x3ff7/0x68e0
[ 2429.787479]  ? __mutex_lock+0x85e/0x16f0
[ 2429.793583] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2429.797379]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2429.797400]  ? check_preemption_disabled+0x48/0x280
[ 2429.797417]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2429.801315] Memory cgroup stats for /syz2: cache:16496KB rss:262264KB rss_huge:247808KB shmem:16404KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:16396KB active_anon:262344KB inactive_file:4KB active_file:0KB unevictable:0KB
[ 2429.807976]  ? debug_smp_processor_id+0x1c/0x20
[ 2429.807995]  ? debug_smp_processor_id+0x1c/0x20
[ 2429.808013]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2429.812239] Memory cgroup out of memory: Kill process 5572 (syz-executor2) score 1106 or sacrifice child
[ 2429.816228]  ? vivid_grab_controls+0x380/0x380
[ 2429.816246]  ? find_held_lock+0x36/0x1c0
[ 2429.822542] Killed process 5572 (syz-executor2) total-vm:70648kB, anon-rss:2216kB, file-rss:33460kB, shmem-rss:0kB
[ 2429.827342]  ? find_held_lock+0x36/0x1c0
[ 2429.827373]  ? lock_downgrade+0x900/0x900
[ 2429.910949]  ? v4l2_ctrl_request_setup+0x477/0xad0
[ 2429.915907]  ? __refrigerator+0x420/0x420
[ 2429.920084]  vivid_thread_vid_cap+0xbc1/0x2650
[ 2429.924684]  ? vivid_thread_vid_cap+0xbc1/0x2650
[ 2429.929452]  ? zap_class+0x640/0x640
[ 2429.933184]  ? zap_class+0x640/0x640
[ 2429.936918]  ? find_held_lock+0x36/0x1c0
[ 2429.941022]  ? vivid_fillbuff+0x68e0/0x68e0
[ 2429.945373]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2429.950506]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2429.955619]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2429.960238]  ? trace_hardirqs_on+0xbd/0x310
[ 2429.964572]  ? kasan_check_read+0x11/0x20
[ 2429.968748]  ? __kthread_parkme+0xce/0x1a0
[ 2429.972996]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2429.978124]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2429.983262]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2429.988377]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2429.993928]  ? __kthread_parkme+0xfb/0x1a0
[ 2429.993963]  ? vivid_fillbuff+0x68e0/0x68e0
[ 2429.993985]  kthread+0x35a/0x440
[ 2430.005914]  ? kthread_stop+0x900/0x900
[ 2430.009919]  ret_from_fork+0x3a/0x50
[ 2430.013663] 
[ 2430.015298] The buggy address belongs to the variable:
[ 2430.020714]  font_vga_8x16+0x50/0x60
[ 2430.024433] 
[ 2430.026060] Memory state around the buggy address:
[ 2430.031032]  ffffffff88632b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2430.038460]  ffffffff88632b80: 00 00 00 00 fa fa fa fa 00 fa fa fa fa fa fa fa
[ 2430.045837] >ffffffff88632c00: 00 00 00 00 00 fa fa fa fa fa fa fa 00 00 00 00
[ 2430.053194]                                                  ^
[ 2430.059214]  ffffffff88632c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2430.066575]  ffffffff88632d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
16:58:30 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x0, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:30 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301e1ff000000003411000000000000"], 0x14}}, 0x0)

[ 2430.073942] ==================================================================
[ 2430.081338] Disabling lock debugging due to kernel taint
16:58:30 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x81ac, 0x6add246f81465f50)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x16}})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xfb, &(0x7f00000001c0), 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'gretap0\x00\x00\x00\x00\x00\x00\x00"\x00'})
socket$unix(0x1, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r1, 0x1)
r2 = socket$unix(0x1, 0x400000001, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
connect(0xffffffffffffffff, &(0x7f0000000700)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xfffffffffffffce5)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1)
r4 = socket$l2tp(0x18, 0x1, 0x1)
rename(&(0x7f0000000380)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x20, 0x4)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000580))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x40000, 0x0)

[ 2430.169530] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000
[ 2430.223388] syz-executor1 cpuset=syz1 mems_allowed=0
16:58:30 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x0, 0x87ae, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

[ 2430.249771] CPU: 0 PID: 31588 Comm: syz-executor1 Tainted: G    B             4.20.0-rc4+ #255
[ 2430.258549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2430.267904] Call Trace:
[ 2430.270505]  dump_stack+0x244/0x39d
[ 2430.274146]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2430.279365]  ? debug_smp_processor_id+0x1c/0x20
[ 2430.284057]  dump_header+0x27b/0xf72
[ 2430.284076]  ? debug_smp_processor_id+0x1c/0x20
[ 2430.284098]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2430.298050]  ? check_preemption_disabled+0x48/0x280
[ 2430.303094]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2430.308671]  ? pagefault_out_of_memory+0x197/0x197
[ 2430.314045]  ? debug_smp_processor_id+0x1c/0x20
[ 2430.318749]  ? perf_trace_lock+0x14d/0x7a0
[ 2430.323006]  ? debug_smp_processor_id+0x1c/0x20
[ 2430.327700]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2430.332754]  ? lock_is_held_type+0x210/0x210
[ 2430.337174]  ? perf_trace_lock+0x7a0/0x7a0
[ 2430.341454]  ? debug_smp_processor_id+0x1c/0x20
[ 2430.346141]  ? perf_trace_lock+0x14d/0x7a0
[ 2430.350399]  ? debug_smp_processor_id+0x1c/0x20
[ 2430.355093]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2430.360046]  ? lock_is_held_type+0x210/0x210
[ 2430.364465]  ? perf_trace_lock+0x7a0/0x7a0
[ 2430.368716]  ? task_will_free_mem+0x239/0xb30
[ 2430.373355]  ? lock_is_held_type+0x210/0x210
[ 2430.377768]  ? ___ratelimit+0x3b4/0x672
[ 2430.381927]  ? lock_downgrade+0x900/0x900
[ 2430.386112]  ? trace_hardirqs_on+0xbd/0x310
[ 2430.390449]  ? kasan_check_read+0x11/0x20
[ 2430.394699]  ? ___ratelimit+0x3b4/0x672
[ 2430.398680]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2430.403806]  ? trace_hardirqs_on+0x310/0x310
[ 2430.408268]  ? lock_downgrade+0x900/0x900
[ 2430.412419]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2430.417518]  ? ___ratelimit+0x3b9/0x672
[ 2430.421505]  ? idr_get_free+0xf70/0xf70
[ 2430.425486]  oom_kill_process.cold.27+0x10/0x903
[ 2430.430259]  ? oom_evaluate_task+0x540/0x540
[ 2430.434663]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2430.440208]  ? cgroup_procs_next+0x70/0x70
[ 2430.444621]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2430.449148]  ? oom_badness+0xaa0/0xaa0
[ 2430.453068]  ? mem_cgroup_scan_tasks+0x1c3/0x1e0
[ 2430.457832]  ? _raw_spin_unlock_irq+0x60/0x80
[ 2430.462359]  ? mem_cgroup_iter_break+0x30/0x30
[ 2430.466951]  ? cgroup_file_notify+0x226/0x2f0
[ 2430.471449]  out_of_memory+0xa84/0x1430
[ 2430.475441]  ? kasan_check_read+0x11/0x20
[ 2430.479608]  ? oom_killer_disable+0x3a0/0x3a0
[ 2430.484116]  mem_cgroup_out_of_memory+0x15e/0x210
[ 2430.488963]  ? memory_oom_group_write+0x160/0x160
[ 2430.493827]  ? mem_cgroup_try_charge+0x627/0xe20
[ 2430.498587]  ? page_counter_try_charge+0x1c1/0x220
[ 2430.503517]  try_charge+0xda9/0x1700
[ 2430.507235]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2430.512187]  ? mem_cgroup_from_task+0x1f0/0x1f0
[ 2430.516878]  ? get_mem_cgroup_from_mm.part.62+0x221/0x880
[ 2430.522449]  ? lock_page_memcg+0x350/0x350
[ 2430.526687]  ? lock_acquire+0x1ed/0x520
[ 2430.530693]  ? mem_cgroup_oom_control_write+0x100/0x100
[ 2430.536071]  ? lock_downgrade+0x900/0x900
[ 2430.540225]  ? lock_release+0xa00/0xa00
[ 2430.544208]  ? perf_trace_sched_process_exec+0x860/0x860
[ 2430.549673]  mem_cgroup_try_charge+0x627/0xe20
[ 2430.554272]  ? mem_cgroup_protected+0xa60/0xa60
[ 2430.558961]  ? lock_is_held_type+0x210/0x210
[ 2430.563372]  ? __pte_alloc+0x1c7/0x350
[ 2430.567270]  ? kasan_check_read+0x11/0x20
[ 2430.571432]  ? do_raw_spin_unlock+0xa7/0x330
[ 2430.575878]  ? do_raw_spin_trylock+0x270/0x270
[ 2430.580481]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2430.586027]  mem_cgroup_try_charge_delay+0x1d/0xa0
[ 2430.590960]  __handle_mm_fault+0x284e/0x5be0
[ 2430.595375]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 2430.600236]  ? lock_is_held_type+0x210/0x210
[ 2430.604663]  ? perf_trace_lock+0x7a0/0x7a0
[ 2430.608898]  ? perf_trace_lock+0x7a0/0x7a0
[ 2430.613157]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2430.618804]  ? blkcg_maybe_throttle_current+0xa38/0x1080
[ 2430.624285]  ? trace_hardirqs_on+0xbd/0x310
[ 2430.628627]  ? blkg_prfill_rwstat_field_recursive+0x170/0x170
[ 2430.634525]  ? lock_is_held_type+0x210/0x210
[ 2430.638950]  ? handle_mm_fault+0x42a/0xc70
[ 2430.643215]  ? lock_downgrade+0x900/0x900
[ 2430.647372]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 2430.652312]  ? __do_page_fault+0x5e8/0xe60
[ 2430.656549]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2430.661657]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2430.667205]  ? check_preemption_disabled+0x48/0x280
[ 2430.672245]  handle_mm_fault+0x54f/0xc70
[ 2430.676310]  ? __handle_mm_fault+0x5be0/0x5be0
[ 2430.680907]  ? find_vma+0x34/0x190
[ 2430.684474]  __do_page_fault+0x5e8/0xe60
[ 2430.688543]  do_page_fault+0xf2/0x7e0
[ 2430.692344]  ? vmalloc_sync_all+0x30/0x30
[ 2430.696495]  ? error_entry+0x70/0xd0
[ 2430.700255]  ? trace_hardirqs_off_caller+0xbb/0x310
[ 2430.705302]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 2430.710235]  ? do_syscall_64+0x820/0x820
[ 2430.714309]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2430.719168]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2430.724184]  ? __bpf_trace_preemptirq_template+0x30/0x30
[ 2430.729639]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 2430.734662]  ? page_fault+0x8/0x30
[ 2430.738218]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2430.743062]  ? page_fault+0x8/0x30
[ 2430.746621]  page_fault+0x1e/0x30
[ 2430.750075] RIP: 0023:0x804f8cc
[ 2430.753356] Code: 64 89 42 24 8b 44 24 30 89 42 28 31 c0 8b 94 c4 20 01 00 00 89 94 81 8c af 14 08 83 c0 01 83 f8 09 75 ea 89 d8 e8 e4 b1 ff ff <83> 05 04 00 35 08 01 80 7c 24 5e 00 74 0b f6 44 24 04 01 0f 84 4f
[ 2430.772257] RSP: 002b:000000000845fc40 EFLAGS: 00010206
[ 2430.777620] RAX: 0000000000000001 RBX: 000000000814af68 RCX: 0000000000000081
[ 2430.784886] RDX: 000000000804f1cc RSI: 0000000000000000 RDI: 0000000000000000
[ 2430.792150] RBP: 000000000814af6c R08: 0000000000000000 R09: 0000000000000000
16:58:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x81ac, 0x6add246f81465f50)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x16}})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xfb, &(0x7f00000001c0), 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'gretap0\x00\x00\x00\x00\x00\x00\x00"\x00'})
socket$unix(0x1, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r1, 0x1)
r2 = socket$unix(0x1, 0x400000001, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
connect(0xffffffffffffffff, &(0x7f0000000700)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xfffffffffffffce5)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1)
r4 = socket$l2tp(0x18, 0x1, 0x1)
rename(&(0x7f0000000380)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x20, 0x4)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000580))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x40000, 0x0)

16:58:31 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x0, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x81ac, 0x6add246f81465f50)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x16}})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xfb, &(0x7f00000001c0), 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'gretap0\x00\x00\x00\x00\x00\x00\x00"\x00'})
socket$unix(0x1, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r1, 0x1)
r2 = socket$unix(0x1, 0x400000001, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
connect(0xffffffffffffffff, &(0x7f0000000700)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xfffffffffffffce5)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1)
r4 = socket$l2tp(0x18, 0x1, 0x1)
rename(&(0x7f0000000380)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x20, 0x4)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000580))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x40000, 0x0)

[ 2430.799411] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000
[ 2430.806677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:58:31 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x0, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:31 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x8001, 0x0, 0x3, 0x3ff, 0x100000001, 0x9, 0xffffffffffffff7e, 0xc0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x1, 0x9, 0xcff7, 0x3, 0x8, 0x0, 0x0, 0x6})
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
mount(&(0x7f0000000500)=ANY=[@ANYBLOB="5b643a3a5d3a2f6c6c623a001e1b746d0a52c135da501e3ce0d95040a37f28031c106655b1aec5eb7ead9ff76991edd7570454e7988cd1f8aa7da3dcd38a53cbfe7435ebdd506e585214ef88e1f77d7a48bc8b88da3bd419d9ea4a53df6d20a4e9824a7af03bd2c3b5bd"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280), 0x0)
capset(&(0x7f0000000000), &(0x7f0000001fe8))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x13f}}, 0x20)
r4 = getpgrp(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x9, 0x40)
fcntl$setown(0xffffffffffffffff, 0x8, r4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000480)="d4f1e1490bc3e1d8ed2d71a49088f8cb5181ae2d0bdee405cbb7032bda8651d466c218c450a6403996f7ad3a24475c12095116801b77157be9d0b7b20f85dd6154514e74")
socket$l2tp(0x18, 0x1, 0x1)

16:58:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x81ac, 0x6add246f81465f50)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x16}})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xfb, &(0x7f00000001c0), 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'gretap0\x00\x00\x00\x00\x00\x00\x00"\x00'})
socket$unix(0x1, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r1, 0x1)
r2 = socket$unix(0x1, 0x400000001, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
connect(0xffffffffffffffff, &(0x7f0000000700)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xfffffffffffffce5)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1)
r4 = socket$l2tp(0x18, 0x1, 0x1)
rename(&(0x7f0000000380)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x20, 0x4)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000580))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x40000, 0x0)

[ 2431.110937] Task in /syz1 killed as a result of limit of /syz1
[ 2431.123472] memory: usage 307200kB, limit 307200kB, failcnt 576
[ 2431.130613] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2431.138177] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2431.145427] Memory cgroup stats for /syz1: cache:16KB rss:270060KB rss_huge:249856KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:270088KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 2431.167484] Memory cgroup out of memory: Kill process 31558 (syz-executor1) score 1106 or sacrifice child
[ 2431.177765] Killed process 31558 (syz-executor1) total-vm:70252kB, anon-rss:2212kB, file-rss:33464kB, shmem-rss:0kB
[ 2431.205721] Kernel panic - not syncing: panic_on_warn set ...
[ 2431.211629] CPU: 0 PID: 31572 Comm: vivid-000-vid-c Tainted: G    B             4.20.0-rc4+ #255
[ 2431.220543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2431.229909] Call Trace:
[ 2431.232512]  dump_stack+0x244/0x39d
[ 2431.236161]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 2431.241380]  panic+0x2ad/0x55c
[ 2431.244577]  ? add_taint.cold.5+0x16/0x16
[ 2431.248730]  ? preempt_schedule+0x4d/0x60
[ 2431.252886]  ? ___preempt_schedule+0x16/0x18
[ 2431.257317]  ? trace_hardirqs_on+0xb4/0x310
[ 2431.261665]  kasan_end_report+0x47/0x4f
[ 2431.265648]  kasan_report.cold.8+0x76/0x309
[ 2431.269979]  ? tpg_print_str_4+0xbc9/0xd70
[ 2431.274223]  __asan_report_load1_noabort+0x14/0x20
[ 2431.279174]  tpg_print_str_4+0xbc9/0xd70
[ 2431.283254]  ? vsnprintf+0x1340/0x1b60
[ 2431.287165]  tpg_gen_text+0x4ba/0x540
[ 2431.290986]  vivid_fillbuff+0x3ff7/0x68e0
[ 2431.295168]  ? __mutex_lock+0x85e/0x16f0
[ 2431.299239]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2431.304184]  ? check_preemption_disabled+0x48/0x280
[ 2431.309221]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2431.314768]  ? debug_smp_processor_id+0x1c/0x20
[ 2431.319448]  ? debug_smp_processor_id+0x1c/0x20
[ 2431.324121]  ? perf_trace_lock_acquire+0x15b/0x800
[ 2431.329077]  ? vivid_grab_controls+0x380/0x380
[ 2431.333663]  ? find_held_lock+0x36/0x1c0
[ 2431.337740]  ? find_held_lock+0x36/0x1c0
[ 2431.341834]  ? lock_downgrade+0x900/0x900
[ 2431.346006]  ? v4l2_ctrl_request_setup+0x477/0xad0
[ 2431.350943]  ? __refrigerator+0x420/0x420
[ 2431.355104]  vivid_thread_vid_cap+0xbc1/0x2650
[ 2431.359694]  ? vivid_thread_vid_cap+0xbc1/0x2650
[ 2431.364456]  ? zap_class+0x640/0x640
[ 2431.368173]  ? zap_class+0x640/0x640
[ 2431.371907]  ? find_held_lock+0x36/0x1c0
[ 2431.375996]  ? vivid_fillbuff+0x68e0/0x68e0
[ 2431.380324]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2431.385431]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[ 2431.390538]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 2431.395121]  ? trace_hardirqs_on+0xbd/0x310
[ 2431.399441]  ? kasan_check_read+0x11/0x20
[ 2431.403594]  ? __kthread_parkme+0xce/0x1a0
[ 2431.407852]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2431.413017]  ? trace_hardirqs_off_caller+0x310/0x310
[ 2431.418164]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 2431.423265]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2431.428799]  ? __kthread_parkme+0xfb/0x1a0
[ 2431.433053]  ? vivid_fillbuff+0x68e0/0x68e0
[ 2431.437390]  kthread+0x35a/0x440
[ 2431.440757]  ? kthread_stop+0x900/0x900
[ 2431.444857]  ret_from_fork+0x3a/0x50
[ 2431.450620] Kernel Offset: disabled
[ 2431.454249] Rebooting in 86400 seconds..